From 85a1c2c3b145d833bd83fa441fd54c5c7f2ffbd4 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sun, 6 Jul 2025 12:48:10 -0700
Subject: add secrets and configurations for cloudflared

---
 nix/machines/vm-synology/ingress.nix | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 nix/machines/vm-synology/ingress.nix

(limited to 'nix/machines/vm-synology/ingress.nix')

diff --git a/nix/machines/vm-synology/ingress.nix b/nix/machines/vm-synology/ingress.nix
new file mode 100644
index 0000000..b6ae596
--- /dev/null
+++ b/nix/machines/vm-synology/ingress.nix
@@ -0,0 +1,16 @@
+{ config, ... }:
+{
+  services.cloudflared = {
+    enable = true;
+    certificateFile = config.age.secrets.cloudflared-cert.path;
+    tunnels = {
+      "cragmont" = {
+        credentialsFile = config.age.secrets.cloudflared-tunnel.path;
+        default = "http_status:404";
+        ingress = {
+          "git.fcuny.net".service = "ssh://127.0.0.1:22";
+        };
+      };
+    };
+  };
+}
-- 
cgit v1.2.3