SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 21:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Avoid repitition of domain names

Browse source
This commit is contained in:
SebastianStork 2025-09-19 21:08:19 +02:00
parent cc211d016b
commit 39edb229af
3 changed files with 206 additions and 194 deletions
Download patch file Download diff file Expand all files Collapse all files

174
hosts/srv-public/default.nix
View file

@ -15,94 +15,98 @@
boot.loader.grub.enable = true;
services = {
resolved.enable = true;
tailscale = {
enable = true;
ssh.enable = true;
};
crowdsec = {
enable = true;
sources = {
iptables = true;
sshd = true;
caddy = true;
services =
let
sproutedDomain = "sprouted.cloud";
in
{
resolved.enable = true;
tailscale = {
enable = true;
ssh.enable = true;
};
bouncers.firewall = true;
};
forgejo = {
enable = true;
doBackups = true;
domain = "git.sstork.dev";
ssh.enable = true;
};
hedgedoc = {
enable = true;
doBackups = true;
domain = "docs.sprouted.cloud";
};
outline = {
enable = true;
domain = "outline.sprouted.cloud";
};
it-tools = {
enable = true;
domain = "tools.sprouted.cloud";
};
stirling-pdf = {
enable = true;
domain = "pdf.sprouted.cloud";
};
privatebin = {
enable = true;
domain = "pastebin.sprouted.cloud";
};
openspeedtest = {
enable = true;
domain = "speedtest.sprouted.cloud";
};
caddy.virtualHosts =
let
inherit (config.custom) services;
in
{
forgejo = {
inherit (services.forgejo) domain port;
};
hedgedoc = {
inherit (services.hedgedoc) domain port;
};
outline = {
inherit (services.outline) domain port;
};
it-tools = {
inherit (services.it-tools) domain port;
};
stirling-pdf = {
inherit (services.stirling-pdf) domain port;
};
privatebin = {
inherit (services.privatebin) domain port;
};
openspeedtest = {
inherit (services.openspeedtest) domain port;
tls = false;
extraReverseProxyConfig = ''
request_buffers 35MiB
response_buffers 35MiB
flush_interval -1
'';
crowdsec = {
enable = true;
sources = {
iptables = true;
sshd = true;
caddy = true;
};
bouncers.firewall = true;
};
};
forgejo = {
enable = true;
doBackups = true;
domain = "git.sstork.dev";
ssh.enable = true;
};
hedgedoc = {
enable = true;
doBackups = true;
domain = "docs.${sproutedDomain}";
};
outline = {
enable = true;
domain = "outline.${sproutedDomain}";
};
it-tools = {
enable = true;
domain = "tools.${sproutedDomain}";
};
stirling-pdf = {
enable = true;
domain = "pdf.${sproutedDomain}";
};
privatebin = {
enable = true;
domain = "pastebin.${sproutedDomain}";
};
openspeedtest = {
enable = true;
domain = "speedtest.${sproutedDomain}";
};
caddy.virtualHosts =
let
inherit (config.custom) services;
in
{
forgejo = {
inherit (services.forgejo) domain port;
};
hedgedoc = {
inherit (services.hedgedoc) domain port;
};
outline = {
inherit (services.outline) domain port;
};
it-tools = {
inherit (services.it-tools) domain port;
};
stirling-pdf = {
inherit (services.stirling-pdf) domain port;
};
privatebin = {
inherit (services.privatebin) domain port;
};
openspeedtest = {
inherit (services.openspeedtest) domain port;
tls = false;
extraReverseProxyConfig = ''
request_buffers 35MiB
response_buffers 35MiB
flush_interval -1
'';
};
};
};
};
}