2025-05-19 21:51:12 +02:00
|
|
|
{ common, ... }:
|
2025-05-13 21:31:29 +02:00
|
|
|
let
|
2025-05-19 21:51:12 +02:00
|
|
|
domain = common.domain;
|
2025-05-13 21:31:29 +02:00
|
|
|
in
|
|
|
|
|
{
|
|
|
|
|
services.caddy = {
|
|
|
|
|
enable = true;
|
|
|
|
|
email = "cert@${domain}";
|
|
|
|
|
virtualHosts =
|
|
|
|
|
let
|
|
|
|
|
reverseProxy = port: "reverse_proxy localhost:${builtins.toString port}";
|
2025-05-15 17:54:54 +02:00
|
|
|
redirect = subdomain: "redir https://${subdomain}.${domain}{uri}";
|
2025-05-13 21:31:29 +02:00
|
|
|
in
|
|
|
|
|
{
|
|
|
|
|
"beta.${domain}".extraConfig = ''
|
|
|
|
|
redir https://${domain}{uri}
|
|
|
|
|
'';
|
|
|
|
|
"git.${domain}".extraConfig = ''
|
2025-05-15 17:54:54 +02:00
|
|
|
${redirect "code"}
|
|
|
|
|
'';
|
|
|
|
|
"kitchenowl.${domain}".extraConfig = ''
|
|
|
|
|
${redirect "grocery"}
|
2025-05-13 21:31:29 +02:00
|
|
|
'';
|
|
|
|
|
# Gitea
|
|
|
|
|
"code.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 3000}
|
|
|
|
|
'';
|
|
|
|
|
# Nextcloud
|
|
|
|
|
"nextcloud.${domain}".extraConfig = ''
|
|
|
|
|
redir /.well-known/carddav /remote.php/dav 301
|
|
|
|
|
redir /.well-known/caldav /remote.php/dav 301
|
|
|
|
|
${reverseProxy 11000}
|
|
|
|
|
'';
|
|
|
|
|
# Kitchenowl
|
2025-05-15 17:54:54 +02:00
|
|
|
"grocery.${domain}".extraConfig = ''
|
2025-05-13 21:31:29 +02:00
|
|
|
${reverseProxy 800}
|
|
|
|
|
'';
|
|
|
|
|
# Actual Budget
|
|
|
|
|
"budget.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 5006}
|
|
|
|
|
'';
|
|
|
|
|
# Uptime Kuma
|
|
|
|
|
"status.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 3001}
|
|
|
|
|
'';
|
|
|
|
|
# Headscale
|
|
|
|
|
"vpn.${domain}".extraConfig = ''
|
|
|
|
|
reverse_proxy /web* localhost:8084
|
|
|
|
|
reverse_proxy * localhost:8082
|
|
|
|
|
'';
|
|
|
|
|
# Headscale SmartDNS
|
|
|
|
|
"dns.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 8082}
|
|
|
|
|
'';
|
|
|
|
|
# FreshRSS
|
|
|
|
|
"rss.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 8085}
|
|
|
|
|
'';
|
|
|
|
|
# Ente backend
|
|
|
|
|
"api.ente.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 8083}
|
|
|
|
|
'';
|
|
|
|
|
# Ente Photos frontend
|
|
|
|
|
"ente.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 3003}
|
|
|
|
|
'';
|
|
|
|
|
# Ente Auth frontend
|
|
|
|
|
"mfa.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 3004}
|
|
|
|
|
'';
|
|
|
|
|
# Homepage / portfolio
|
|
|
|
|
"${domain}".extraconfig = ''
|
|
|
|
|
${reverseProxy 4321}
|
|
|
|
|
'';
|
|
|
|
|
# Yamtrack
|
|
|
|
|
"track.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 8090}
|
|
|
|
|
'';
|
|
|
|
|
# Postal
|
|
|
|
|
"mail.${domain}".extraConfig = ''
|
|
|
|
|
${reverseProxy 5000}
|
|
|
|
|
'';
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
}
|
