homelab/services/ingress.nix
2026-05-22 18:34:20 +09:00

41 lines
932 B
Nix

{
config,
pkgs,
...
}: {
sops.secrets."cloudflare/caddy_env" = {
owner = config.services.caddy.user;
group = config.services.caddy.group;
mode = "0400";
restartUnits = [
"caddy.service"
];
};
services.caddy = {
enable = true;
enableReload = true;
package = pkgs.caddy.withPlugins {
plugins = [
"github.com/caddy-dns/cloudflare@v0.2.4"
];
hash = "sha256-vNSHU7txQLs0m0UChuszURXjEoMj4r1902+1ei0/DaI=";
};
environmentFile = config.sops.secrets."cloudflare/caddy_env".path;
globalConfig = ''
email smg981024@gmail.com
acme_dns cloudflare {env.CLOUDFLARE_API_TOKEN}
'';
virtualHosts."http://yggdrasil.tail6fc192.ts.net:8080".extraConfig = ''
respond "yggdrasil caddy ingress ok"
'';
virtualHosts."home.ridewithmin.com".extraConfig = ''
reverse_proxy http://midgard.tail6fc192.ts.net:8082
'';
};
}