caddy: Configure virtual hosts inside each web-service's module instead of in the host configs

hosts/srv-public/default.nix

@@ -86,34 +86,6 @@
           enable = true;
           domain = "alloy-${config.networking.hostName}.${config.custom.services.tailscale.domain}";
         };
-
-        caddy.virtualHosts =
-          let
-            inherit (config.custom) services;
-          in
-          {
-            personal-blog = {
-              inherit (services.personal-blog) domain port;
-            };
-            forgejo = {
-              inherit (services.forgejo) domain port;
-            };
-            outline = {
-              inherit (services.outline) domain port;
-            };
-            it-tools = {
-              inherit (services.it-tools) domain port;
-            };
-            stirling-pdf = {
-              inherit (services.stirling-pdf) domain port;
-            };
-            privatebin = {
-              inherit (services.privatebin) domain port;
-            };
-            alloy = {
-              inherit (services.alloy) domain port;
-            };
-          };
       };
   };
 }

hosts/vps-monitor/default.nix

@@ -85,31 +85,6 @@
           enable = true;
           domain = "alloy-${config.networking.hostName}.${tailscaleDomain}";
         };
-
-        caddy.virtualHosts =
-          let
-            inherit (config.custom) services;
-          in
-          {
-            gatus = {
-              inherit (services.gatus) domain port;
-            };
-            ntfy = {
-              inherit (services.ntfy) domain port;
-            };
-            grafana = {
-              inherit (services.grafana) domain port;
-            };
-            victoriametrics = {
-              inherit (services.victoriametrics) domain port;
-            };
-            victorialogs = {
-              inherit (services.victorialogs) domain port;
-            };
-            alloy = {
-              inherit (services.alloy) domain port;
-            };
-          };
       };
   };
 }

hosts/vps-private/default.nix

@@ -76,34 +76,6 @@
           enable = true;
           domain = "alloy-${config.networking.hostName}.${tailscaleDomain}";
         };
-
-        caddy.virtualHosts =
-          let
-            inherit (config.custom) services;
-          in
-          {
-            syncthing-gui = {
-              inherit (services.syncthing.gui) domain port;
-            };
-            filebrowser = {
-              inherit (services.filebrowser) domain port;
-            };
-            radicale = {
-              inherit (services.radicale) domain port;
-            };
-            memos = {
-              inherit (services.memos) domain port;
-            };
-            actualbudget = {
-              inherit (services.actualbudget) domain port;
-            };
-            freshrss = {
-              inherit (services.freshrss) domain port;
-            };
-            alloy = {
-              inherit (services.alloy) domain port;
-            };
-          };
       };
   };
 }

modules/system/services/syncthing.nix

@@ -133,10 +133,14 @@ in
     };
 
     custom = {
-      services.restic.backups.syncthing = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.gui.domain}.port = lib.mkIf (cfg.gui.domain != null) cfg.gui.port;
+
+        restic.backups.syncthing = lib.mkIf cfg.doBackups {
           conflictingService = "syncthing.service";
           paths = [ dataDir ];
         };
+      };
 
       persist.directories = [ dataDir ];
     };

modules/system/web-services/actualbudget.nix

@@ -47,10 +47,14 @@ in
     };
 
     custom = {
-      services.restic.backups.actual = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+        restic.backups.actual = lib.mkIf cfg.doBackups {
           conflictingService = "actual.service";
           paths = [ dataDir ];
         };
+      };
 
       persist.directories = [ dataDir ];
     };

modules/system/web-services/alloy.nix

@@ -168,5 +168,7 @@ in
           '';
         };
       };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
   };
 }

modules/system/web-services/filebrowser.nix

@@ -53,10 +53,14 @@ in
     };
 
     custom = {
-      services.restic.backups.filebrowser = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+        restic.backups.filebrowser = lib.mkIf cfg.doBackups {
           conflictingService = "filebrowser.service";
           paths = [ dataDir ];
         };
+      };
 
       persist.directories = [ dataDir ];
     };

modules/system/web-services/forgejo/default.nix

@@ -119,10 +119,14 @@ in
       '';
 
     custom = {
-      services.restic.backups.forgejo = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+        restic.backups.forgejo = lib.mkIf cfg.doBackups {
           conflictingService = "forgejo.service";
           paths = [ config.services.forgejo.stateDir ];
         };
+      };
 
       persist.directories = [ config.services.forgejo.stateDir ];
     };

modules/system/web-services/freshrss.nix

@@ -44,10 +44,14 @@ in
     };
 
     custom = {
-      services.restic.backups.freshrss = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+        restic.backups.freshrss = lib.mkIf cfg.doBackups {
           conflictingService = "freshrss-updater.service";
           paths = [ dataDir ];
         };
+      };
 
       persist.directories = [ dataDir ];
     };

modules/system/web-services/gatus.nix

@@ -103,37 +103,6 @@ in
       RemoveIPC = true;
     };
 
-    custom.services.gatus.endpoints =
-      let
-        defaultEndpoints =
-          self.nixosConfigurations
-          |> lib.mapAttrs (_: value: value.config.meta.domains.list)
-          |> lib.concatMapAttrs (
-            hostName: domains:
-            domains
-            |> lib.filter (domain: domain != cfg.domain)
-            |> lib.map (
-              domain:
-              lib.nameValuePair (lib'.subdomainOf domain) {
-                inherit domain;
-                group = hostName;
-              }
-            )
-            |> lib.listToAttrs
-          );
-      in
-      lib.mkIf cfg.generateDefaultEndpoints (
-        defaultEndpoints
-        // {
-          "healthchecks.io" = {
-            group = "external";
-            domain = "hc-ping.com";
-            path = "/\${HEALTHCHECKS_PING_KEY}/${config.networking.hostName}-gatus-uptime?create=1";
-            interval = "2h";
-          };
-        }
-      );
-
     services.gatus = {
       enable = true;
       package = pkgs-unstable.gatus; # Unstable for the new UI
@@ -206,6 +175,43 @@ in
 
     systemd.services.gatus.environment.GATUS_DELAY_START_SECONDS = "5";
 
-    custom.persist.directories = [ dataDir ];
+    custom = {
+      services = {
+        gatus.endpoints =
+          let
+            defaultEndpoints =
+              self.nixosConfigurations
+              |> lib.mapAttrs (_: value: value.config.meta.domains.list)
+              |> lib.concatMapAttrs (
+                hostName: domains:
+                domains
+                |> lib.filter (domain: domain != cfg.domain)
+                |> lib.map (
+                  domain:
+                  lib.nameValuePair (lib'.subdomainOf domain) {
+                    inherit domain;
+                    group = hostName;
+                  }
+                )
+                |> lib.listToAttrs
+              );
+          in
+          lib.mkIf cfg.generateDefaultEndpoints (
+            defaultEndpoints
+            // {
+              "healthchecks.io" = {
+                group = "external";
+                domain = "hc-ping.com";
+                path = "/\${HEALTHCHECKS_PING_KEY}/${config.networking.hostName}-gatus-uptime?create=1";
+                interval = "2h";
+              };
+            }
+          );
+
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+      };
+
+      persist.directories = [ dataDir ];
+    };
   };
 }

modules/system/web-services/grafana.nix

@@ -170,5 +170,7 @@ in
           );
       };
     };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
   };
 }

modules/system/web-services/it-tools.nix

@@ -14,23 +14,11 @@ in
       type = lib.types.nonEmptyStr;
       default = "";
     };
-    port = lib.mkOption {
-      type = lib.types.port;
-      default = 8787;
-    };
   };
 
   config = lib.mkIf cfg.enable {
-    meta = {
+    meta.domains.list = [ cfg.domain ];
-      domains.list = [ cfg.domain ];
-      ports.tcp.list = [ cfg.port ];
-    };
 
-    services.static-web-server = {
+    custom.services.caddy.virtualHosts.${cfg.domain}.files = "${pkgs.it-tools}/lib";
-      enable = true;
-      listen = "[::]:${toString cfg.port}";
-      root = "${pkgs.it-tools}/lib";
-      configuration.general.health = true;
-    };
   };
 }

modules/system/web-services/memos.nix

@@ -55,10 +55,14 @@ in
     };
 
     custom = {
-      services.restic.backups.memos = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+        restic.backups.memos = lib.mkIf cfg.doBackups {
           conflictingService = "memos.service";
           paths = [ dataDir ];
         };
+      };
 
       persist.directories = [ dataDir ];
     };

modules/system/web-services/ntfy.nix

@@ -30,5 +30,7 @@ in
         web-root = "disable";
       };
     };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
   };
 }

modules/system/web-services/openspeedtest.nix

@@ -26,5 +26,7 @@ in
       ports = [ "127.0.0.1:${toString cfg.port}:3000" ];
       pull = "newer";
     };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
   };
 }

modules/system/web-services/outline.nix

@@ -73,7 +73,10 @@ in
         inherit (config.services.outline) user;
       in
       {
-        services.restic.backups.outline = lib.mkIf cfg.doBackups {
+        services = {
+          caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+          restic.backups.outline = lib.mkIf cfg.doBackups {
             conflictingService = "outline.service";
             paths = [ dataDir ];
             extraConfig.backupPrepareCommand = ''
@@ -81,6 +84,7 @@ in
             '';
             restoreCommand.postRestore = "sudo --user=${user} pg_restore --clean --if-exists --dbname outline ${dataDir}/db.dump";
           };
+        };
 
         persist.directories = [
           dataDir

modules/system/web-services/personal-blog.nix

@@ -16,17 +16,10 @@ in
       type = lib.types.nonEmptyStr;
       default = "";
     };
-    port = lib.mkOption {
-      type = lib.types.port;
-      default = 3890;
-    };
   };
 
   config = lib.mkIf cfg.enable {
-    meta = {
+    meta.domains.list = [ cfg.domain ];
-      domains.list = [ cfg.domain ];
-      ports.tcp.list = [ cfg.port ];
-    };
 
     systemd.services.generate-blog = {
       serviceConfig.Type = "oneshot";
@@ -36,9 +29,6 @@ in
       script = "nix build github:SebastianStork/blog --out-link ${dataDir} --refresh";
     };
 
-    services.caddy.virtualHosts.":${toString cfg.port}".extraConfig = ''
+    custom.services.caddy.virtualHosts.${cfg.domain}.files = dataDir;
-      root * ${dataDir}
-      file_server
-    '';
   };
 }

modules/system/web-services/privatebin.nix

@@ -52,5 +52,7 @@ in
         inherit (cfg) port;
       };
     };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
   };
 }

modules/system/web-services/radicale.nix

@@ -107,10 +107,15 @@ in
       );
 
     custom = {
-      services.restic.backups.radicale = lib.mkIf cfg.doBackups {
+      services = {
+        caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+        restic.backups.radicale = lib.mkIf cfg.doBackups {
           conflictingService = "radicale.service";
           paths = [ dataDir ];
         };
+      };
+
       persist.directories = [ dataDir ];
     };
   };

modules/system/web-services/stirling-pdf.nix

@@ -44,5 +44,7 @@ in
         UI_HOMEDESCRIPTION = cfg.branding.description;
       };
     };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
   };
 }

modules/system/web-services/uptime-kuma.nix

@@ -26,6 +26,10 @@ in
       settings.PORT = toString cfg.port;
     };
 
-    custom.persist.directories = [ config.services.uptime-kuma.settings.DATA_DIR ];
+    custom = {
+      services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+      persist.directories = [ config.services.uptime-kuma.settings.DATA_DIR ];
+    };
   };
 }

modules/system/web-services/victorialogs.nix

@@ -57,6 +57,10 @@ in
       listenAddress = "localhost:${toString cfg.port}";
     };
 
-    custom.persist.directories = [ "/var/lib/${config.services.victorialogs.stateDir}" ];
+    custom = {
+      services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+      persist.directories = [ "/var/lib/${config.services.victorialogs.stateDir}" ];
+    };
   };
 }

modules/system/web-services/victoriametrics.nix

@@ -62,6 +62,10 @@ in
       ];
     };
 
-    custom.persist.directories = [ "/var/lib/${config.services.victoriametrics.stateDir}" ];
+    custom = {
+      services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+      persist.directories = [ "/var/lib/${config.services.victoriametrics.stateDir}" ];
+    };
   };
 }