john/panoptes-nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added cloudflared

Browse Source
This commit is contained in:
John Lancaster
2025-05-27 01:52:15 -05:00
parent 373fc522e3
commit d76706c2e0
4 changed files with 49 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
nixosModules/caddy.nix
View File

@@ -6,7 +6,7 @@
services.caddy = {
enable = true;
environmentFile = config.sops.secrets.cloudflare-api-key.path;
virtualHosts."paperless.john-stream.com".extraConfig = ''
virtualHosts."panoptes.john-stream.com".extraConfig = ''
reverse_proxy 192.168.1.110:8000
tls {
dns cloudflare {env.CF_API_TOKEN}
@@ -19,4 +19,9 @@
};
networking.firewall.allowedTCPPorts = [ 80 443 ];
# systemd.services.caddy.serviceConfig = {
# # EnvironmentFile = "/etc/caddy/cloudflare.env";
# AmbientCapabilities = "CAP_NET_BIND_SERVICE";
# };
}