From ac92a4bd2869debbc3a9bd483b50d5cc1d923667 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sun, 24 Aug 2025 18:56:31 -0700
Subject: run `goget` on `go.fcuny.net`

---
 machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix   | 14 ++++++++++++++
 machines/nixos/x86_64-linux/synology-vm/default.nix        |  1 +
 machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix |  7 +++++++
 3 files changed, 22 insertions(+)
 create mode 100644 machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix

(limited to 'machines')

diff --git a/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix b/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
index d426a53..c39a1ec 100644
--- a/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
+++ b/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
@@ -16,6 +16,13 @@
         reloadServices = [ "caddy.service" ];
         credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
       };
+      "go.fcuny.net" = {
+        domain = "go.fcuny.net";
+        dnsProvider = "cloudflare";
+        dnsResolver = "1.1.1.1";
+        reloadServices = [ "caddy.service" ];
+        credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
+      };
       "id.fcuny.net" = {
         domain = "id.fcuny.net";
         dnsProvider = "cloudflare";
@@ -46,6 +53,13 @@
           reverse_proxy 10.100.0.40:3000
         '';
       };
+      go = {
+        hostName = "go.fcuny.net";
+        useACMEHost = "go.fcuny.net";
+        extraConfig = ''
+          reverse_proxy 10.100.0.40:8070
+        '';
+      };
       auth = {
         hostName = "id.fcuny.net";
         useACMEHost = "id.fcuny.net";
diff --git a/machines/nixos/x86_64-linux/synology-vm/default.nix b/machines/nixos/x86_64-linux/synology-vm/default.nix
index de0f5e9..9316432 100644
--- a/machines/nixos/x86_64-linux/synology-vm/default.nix
+++ b/machines/nixos/x86_64-linux/synology-vm/default.nix
@@ -30,6 +30,7 @@
     "${self}/profiles/programs/fish.nix"
     ./profiles/forgejo.nix
     ./profiles/keycloak.nix
+    ./profiles/goget.nix
   ];
 
   boot.loader.efi.canTouchEfiVariables = true;
diff --git a/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix b/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix
new file mode 100644
index 0000000..ac32e62
--- /dev/null
+++ b/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix
@@ -0,0 +1,7 @@
+{ ... }:
+{
+  services.goget = {
+    enable = true;
+    openFirewall = true;
+  };
+}
-- 
cgit v1.2.3