SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 17:31:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Extract mkVirtualHostConfig function

Browse source
This commit is contained in:
SebastianStork 2025-06-06 21:52:34 +02:00
parent 4f72e57193
commit da9008c379
1 changed files with 16 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

29
modules/system/services/caddy.nix
View file

@ -19,6 +19,17 @@ let
nonTailscaleHostsExist = lib.any (v: !isTailscaleDomain v.domain) (lib.attrValues virtualHosts);
getSubdomain = domain: domain |> lib.splitString "." |> lib.head;
mkVirtualHostConfig = domain: port: {
logFormat = "output file ${config.services.caddy.logDir}/access-${domain}.log { mode 640 }";
extraConfig = ''
${lib.optionalString (isTailscaleDomain domain) ''
bind tailscale/${getSubdomain domain}
tailscale_auth
''}
reverse_proxy localhost:${toString port}
'';
};
in
{
options.custom.services.caddy.virtualHosts = lib.mkOption {
@ -51,19 +62,11 @@ in
{
services.caddy = {
enable = true;
virtualHosts = lib.mapAttrs' (
_: value:
lib.nameValuePair value.domain {
logFormat = "output file ${config.services.caddy.logDir}/access-${value.domain}.log { mode 640 }";
extraConfig = lib.concatStrings [
(lib.optionalString (isTailscaleDomain value.domain) ''
bind tailscale/${getSubdomain value.domain}
tailscale_auth
'')
"reverse_proxy localhost:${toString value.port}"
];
}
) virtualHosts;
virtualHosts =
virtualHosts
|> lib.mapAttrs' (
_: value: lib.nameValuePair value.domain (mkVirtualHostConfig value.domain value.port)
);
};
networking.firewall.allowedTCPPorts = lib.mkIf nonTailscaleHostsExist [