pixelifytica/nixos
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Initial convert from traefik to caddy

Browse source 
Move (hopefully) all reverse proxies to caddy
Left off adguard for now, tbd if it needs outside access

Moved service expressions up a level since it was a bit unneccesary before
This commit is contained in:
Evie Litherland-Smith 2023-11-20 08:19:13 +00:00
parent 226f1f1195
commit a853475779
22 changed files with 66 additions and 779 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
flake.nix
View file

@ -104,7 +104,10 @@
"nomachine-client"
];
system = { inherit stateVersion; };
networking = { inherit hostName; };
networking = {
inherit hostName;
firewall.enable = true;
};
stylix = {
autoEnable = false;
targets = {
@ -242,13 +245,13 @@
inherit hostName user system;
systemModules = [ ./system/default.nix ];
serviceModules = [
./services/adguardhome/default.nix
./services/gitea/default.nix
./services/navidrome/default.nix
./services/nextcloud/default.nix
./services/ntfy-sh/default.nix
./services/sshd/default.nix
./services/syncthing/default.nix
./services/adguardhome.nix
./services/gitea.nix
./services/navidrome.nix
./services/nextcloud.nix
./services/ntfy-sh.nix
./services/sshd.nix
./services/syncthing.nix
];
homeModules = [ ./home/default.nix ];
};

1
services/adguardhome/default.nix → services/adguardhome.nix
View file

@ -1,7 +1,6 @@
{ config, lib, pkgs, ... }:
{
imports = [ ../traefik/adguardhome.nix ];
services.adguardhome = {
enable = true;
mutableSettings = false;

15
services/caddy.nix Normal file
View file

@ -0,0 +1,15 @@
{ ... }: {
networking.firewall.allowedTCPPorts = [ 80 443 ];
services.caddy = {
enable = true;
email = "evie@xenia.me.uk";
virtualHosts."localhost".extraConfig = ''
respond "Hello, world!"
'';
};
services.fail2ban = {
enable = true;
ignoreIP = [ "127.0.0.1/8" "::1" "192.168.1.0/16" ];
bantime-increment = { enable = true; };
};
}

9
services/fail2ban/default.nix
View file

@ -1,9 +0,0 @@
{ config, lib, pkgs, ... }:
{
services.fail2ban = {
enable = true;
ignoreIP = [ "127.0.0.1/8" "::1" "192.168.1.0/16" ];
bantime-increment = { enable = true; };
};
}

11
services/fail2ban/traefik.nix
View file

@ -1,11 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.fail2ban.jails.traefik = ''
enabled = true
filter = traefik-auth
ports = http,https
backend = systemd
'';
}

12
services/gitea/default.nix → services/gitea.nix
View file

@ -1,7 +1,5 @@
{ ... }:
{
imports = [ ../traefik/gitea.nix ];
{ ... }: {
imports = [ ./caddy.nix ];
services.gitea = {
enable = true;
settings = {
@ -14,10 +12,12 @@
};
service.DISABLE_REGISTRATION = true;
ui = {
DEFAULT_THEME = "github";
THEMES = "auto,gitea,arc-green,github";
DEFAULT_THEME = "auto";
THEMES = "auto,gitea,arc-greenw";
};
};
appName = "Gitea";
};
services.caddy.virtualHosts."git.xenia.me.uk".extraConfig =
"reverse_proxy http://localhost:3100 ";
}

552
services/gitea/custom/css/theme-github.css
View file

@ -1,552 +0,0 @@
/* Made by Rainnny <3 */
.chroma {
background-color: var(--color-code-bg);
}
.chroma .lntd {
vertical-align: top;
border: 0;
margin: 0;
padding: 0;
}
.chroma .lntable {
border-spacing: 0;
border: 0;
width: auto;
margin: 0;
padding: 0;
display: block;
overflow: auto;
}
.chroma .hl {
width: 100%;
display: block;
}
.chroma .lnt,
.chroma .ln {
margin-right: 0.4em;
padding: 0 0.4em;
}
.chroma .gs {
font-weight: var(--font-weight-semibold);
}
.chroma .gl {
text-decoration: underline;
}
.chroma .bp {
color: #fabd2f;
}
.chroma .c,
.chroma .c1,
.chroma .ch,
.chroma .cm {
color: #777e94;
}
.chroma .cp {
color: #8ec07c;
}
.chroma .cpf {
color: #79c0ff;
}
.chroma .cs {
color: #9075cd;
}
.chroma .dl {
color: #79c0ff;
}
.chroma .gd {
color: #fff;
background-color: #5f3737;
}
.chroma .ge {
color: #ddee30;
}
.chroma .gh {
color: #ffaa10;
}
.chroma .gi {
color: #fff;
background-color: #3a523a;
}
.chroma .go {
color: #777e94;
}
.chroma .gp {
color: #ebdbb2;
}
.chroma .gr {
color: #f43;
}
.chroma .gs {
color: #ebdbb2;
}
.chroma .gt {
color: #7ee787;
}
.chroma .gu {
color: #a5d6ff;
}
.chroma .il {
color: #79c0ff;
}
.chroma .k {
color: #ff7b72;
}
.chroma .kc {
color: #79c0ff;
}
.chroma .kd {
color: #ff7b72;
}
.chroma .kn {
color: #ff7b72;
}
.chroma .kp {
color: #5f8700;
}
.chroma .kr {
color: #7ee787;
}
.chroma .kt {
color: #ff7b72;
}
.chroma .m,
.chroma .mb,
.chroma .mf,
.chroma .mh,
.chroma .mi,
.chroma .mo {
color: #79c0ff;
}
.chroma .n {
color: #c9d1d9;
}
.chroma .na {
color: #d2a8ff;
}
.chroma .nb {
color: #a5d6ff;
}
.chroma .nc {
color: #e6edf3;
}
.chroma .nd {
color: #79c0ff;
}
.chroma .ne {
color: #7ee787;
}
.chroma .nf,
.chroma .ni {
color: #d2a8ff;
}
.chroma .nl {
color: #7ee787;
}
.chroma .nn {
color: #e6edf3;
}
.chroma .no {
color: #79c0ff;
}
.chroma .nt {
color: #7ee787;
}
.chroma .nv {
color: #ebdbb2;
}
.chroma .nx {
color: #b6bac5;
}
.chroma .o {
color: #7ee787;
}
.chroma .ow {
color: #5f8700;
}
.chroma .p {
color: #d2d4db;
}
.chroma .s,
.chroma .s1,
.chroma .s2 {
color: #a5d6ff;
}
.chroma .sa {
color: #79c0ff;
}
.chroma .sb {
color: #a5d6ff;
}
.chroma .sc {
color: #79c0ff;
}
.chroma .sd {
color: #777e94;
}
.chroma .se {
color: #7ee787;
}
.chroma .sh {
color: #79c0ff;
}
.chroma .si {
color: #ffaa10;
}
.chroma .sr {
color: #9075cd;
}
.chroma .ss {
color: #7ee787;
}
.chroma .sx {
color: #ffaa10;
}
.chroma .vc {
color: #7ee787;
}
.chroma .vg,
.chroma .vi {
color: #ffaa10;
}
.chroma .w {
color: #7f8699;
}
.CodeMirror.cm-s-default .cm-property,
.CodeMirror.cm-s-paper .cm-property {
color: #a0cc75;
}
.CodeMirror.cm-s-default .cm-header,
.CodeMirror.cm-s-paper .cm-header {
color: #9daccc;
}
.CodeMirror.cm-s-default .cm-quote,
.CodeMirror.cm-s-paper .cm-quote {
color: #090;
}
.CodeMirror.cm-s-default .cm-keyword,
.CodeMirror.cm-s-paper .cm-keyword {
color: #cc8a61;
}
.CodeMirror.cm-s-default .cm-atom,
.CodeMirror.cm-s-paper .cm-atom {
color: #ef5e77;
}
.CodeMirror.cm-s-default .cm-number,
.CodeMirror.cm-s-paper .cm-number {
color: #ff5656;
}
.CodeMirror.cm-s-default .cm-def,
.CodeMirror.cm-s-paper .cm-def {
color: #e4e4e4;
}
.CodeMirror.cm-s-default .cm-variable-2,
.CodeMirror.cm-s-paper .cm-variable-2 {
color: #00bdbf;
}
.CodeMirror.cm-s-default .cm-variable-3,
.CodeMirror.cm-s-paper .cm-variable-3 {
color: #085;
}
.CodeMirror.cm-s-default .cm-comment,
.CodeMirror.cm-s-paper .cm-comment {
color: #8e9ab3;
}
.CodeMirror.cm-s-default .cm-string,
.CodeMirror.cm-s-paper .cm-string {
color: #a77272;
}
.CodeMirror.cm-s-default .cm-string-2,
.CodeMirror.cm-s-paper .cm-string-2 {
color: #f50;
}
.CodeMirror.cm-s-default .cm-meta,
.CodeMirror.cm-s-paper .cm-meta,
.CodeMirror.cm-s-default .cm-qualifier,
.CodeMirror.cm-s-paper .cm-qualifier {
color: #ffb176;
}
.CodeMirror.cm-s-default .cm-builtin,
.CodeMirror.cm-s-paper .cm-builtin {
color: #b7c951;
}
.CodeMirror.cm-s-default .cm-bracket,
.CodeMirror.cm-s-paper .cm-bracket {
color: #997;
}
.CodeMirror.cm-s-default .cm-tag,
.CodeMirror.cm-s-paper .cm-tag {
color: #f1d273;
}
.CodeMirror.cm-s-default .cm-attribute,
.CodeMirror.cm-s-paper .cm-attribute {
color: #bfcc70;
}
.CodeMirror.cm-s-default .cm-hr,
.CodeMirror.cm-s-paper .cm-hr {
color: #999;
}
.CodeMirror.cm-s-default .cm-url,
.CodeMirror.cm-s-paper .cm-url {
color: #c5cfd0;
}
.CodeMirror.cm-s-default .cm-link,
.CodeMirror.cm-s-paper .cm-link {
color: #d8c792;
}
.CodeMirror.cm-s-default .cm-error,
.CodeMirror.cm-s-paper .cm-error {
color: #dbdbeb;
}
:root {
--is-dark-theme: true;
--color-primary: #4b80ca;
--color-primary-contrast: #fff;
--color-primary-dark-1: #739cb3;
--color-primary-dark-2: #40aaff;
--color-primary-dark-3: #92b4c4;
--color-primary-dark-4: #a1bbcd;
--color-primary-dark-5: #cfddc1;
--color-primary-dark-6: #e7eee0;
--color-primary-dark-7: #f8faf6;
--color-primary-light-1: #4b80ca;
--color-primary-light-2: #437aad;
--color-primary-light-3: #415b8b;
--color-primary-light-4: #25425a;
--color-primary-light-5: #223546;
--color-primary-light-6: #131923;
--color-primary-light-7: #06090b;
--color-primary-alpha-10: #3683c019;
--color-primary-alpha-20: #3683c033;
--color-primary-alpha-30: #3683c04b;
--color-primary-alpha-40: #3683c066;
--color-primary-alpha-50: #3683c080;
--color-primary-alpha-60: #3683c099;
--color-primary-alpha-70: #3683c0b3;
--color-primary-alpha-80: #3683c0cc;
--color-primary-alpha-90: #3683c0e1;
--color-primary-hover: var(--color-primary-light-1);
--color-primary-active: var(--color-primary-light-2);
--color-secondary: #2c2f35;
--color-secondary-dark-1: #505665;
--color-secondary-dark-2: #5b6273;
--color-secondary-dark-3: #71798e;
--color-secondary-dark-4: #7f8699;
--color-secondary-dark-5: #8c93a4;
--color-secondary-dark-6: #9aa0af;
--color-secondary-dark-7: #a8adba;
--color-secondary-dark-8: #c4c7d0;
--color-secondary-dark-9: #dfe1e6;
--color-secondary-dark-10: #edeef1;
--color-secondary-dark-11: #fbfbfc;
--color-secondary-dark-12: #eeeff2;
--color-secondary-dark-13: #fbfbfc;
--color-secondary-light-1: #373b46;
--color-secondary-light-2: #292c34;
--color-secondary-light-3: #1c1e23;
--color-secondary-light-4: #0e0f11;
--color-secondary-alpha-10: #2c2f35;
--color-secondary-alpha-20: #2c2f3533;
--color-secondary-alpha-30: #2c2f354b;
--color-secondary-alpha-40: #2c2f3566;
--color-secondary-alpha-50: #2c2f3580;
--color-secondary-alpha-60: #2c2f3599;
--color-secondary-alpha-70: #2c2f35b3;
--color-secondary-alpha-80: #2c2f35cc;
--color-secondary-alpha-90: #2c2f35e1;
--color-red: #da3737;
--color-orange: #f17a2b;
--color-yellow: #f3c640;
--color-olive: #c8df36;
--color-green: #3bc75b;
--color-teal: #69d4cf;
--color-blue: #4b80ca;
--color-violet: #754ad3;
--color-purple: #b65dd4;
--color-pink: #e04b9f;
--color-brown: #a86d45;
--color-black: #141516;
--color-grey: #797c85;
--color-gold: #d4b74c;
--color-white: #ffffff;
--color-red-light: #d15a5a;
--color-orange-light: #f6a066;
--color-yellow-light: #eaaf03;
--color-olive-light: #abc016;
--color-green-light: #93b373;
--color-teal-light: #00b6ad;
--color-blue-light: #4e96cc;
--color-violet-light: #9b79e4;
--color-purple-light: #ba6ad5;
--color-pink-light: #d74397;
--color-brown-light: #b08061;
--color-black-light: #3f4555;
--color-red-dark-1: #c23636;
--color-orange-dark-1: #f38236;
--color-yellow-dark-1: #b88a03;
--color-olive-dark-1: #839311;
--color-green-dark-1: #7a9e55;
--color-teal-dark-1: #00837c;
--color-blue-dark-1: #347cb3;
--color-violet-dark-1: #7b4edb;
--color-purple-dark-1: #a742c9;
--color-pink-dark-1: #be297d;
--color-brown-dark-1: #94674a;
--color-black-dark-1: #292d38;
--color-red-dark-2: #ad3030;
--color-orange-dark-2: #f16e17;
--color-yellow-dark-2: #a37a02;
--color-olive-dark-2: #74820f;
--color-green-dark-2: #6c8c4c;
--color-teal-dark-2: #00746e;
--color-blue-dark-2: #2e6e9f;
--color-violet-dark-2: #6733d6;
--color-purple-dark-2: #9834b9;
--color-pink-dark-2: #a9246f;
--color-brown-dark-2: #835b42;
--color-black-dark-2: #252832;
--color-console-bg: #11171f;
--color-ansi-black: var(--color-black);
--color-ansi-red: var(--color-red);
--color-ansi-green: var(--color-green);
--color-ansi-yellow: var(--color-yellow);
--color-ansi-blue: var(--color-blue);
--color-ansi-magenta: var(--color-pink);
--color-ansi-cyan: var(--color-teal);
--color-ansi-white: var(--color-console-fg-subtle);
--color-ansi-bright-black: var(--color-black-light);
--color-ansi-bright-red: var(--color-red-light);
--color-ansi-bright-green: var(--color-green-light);
--color-ansi-bright-yellow: var(--color-yellow-light);
--color-ansi-bright-blue: var(--color-blue-light);
--color-ansi-bright-magenta: var(--color-pink-light);
--color-ansi-bright-cyan: var(--color-teal-light);
--color-ansi-bright-white: var(--color-console-fg);
--color-grey: #505665;
--color-grey-light: #a1a6b7;
--color-gold: #b1983b;
--color-white: #fff;
--color-diff-removed-word-bg: #6f3333;
--color-diff-added-word-bg: #3c653c;
--color-diff-removed-row-bg: #3c2626;
--color-diff-moved-row-bg: #818044;
--color-diff-added-row-bg: #283e2d;
--color-diff-removed-row-border: #634343;
--color-diff-moved-row-border: #bcca6f;
--color-diff-added-row-border: #314a37;
--color-diff-inactive: #353846;
--color-error-border: #a04141;
--color-error-bg: #522;
--color-error-bg-active: #744;
--color-error-bg-hover: #633;
--color-error-text: #f9cbcb;
--color-success-border: #458a57;
--color-success-bg: #284034;
--color-success-text: #6cc664;
--color-warning-border: #bb9d00;
--color-warning-bg: #3a3a30;
--color-warning-text: #fbbd08;
--color-info-border: #306090;
--color-info-bg: #26354c;
--color-info-text: #38a8e8;
--color-red-badge: #db2828;
--color-red-badge-bg: #db28281a;
--color-red-badge-hover-bg: #db28284d;
--color-green-badge: #21ba45;
--color-green-badge-bg: #21ba451a;
--color-green-badge-hover-bg: #21ba454d;
--color-yellow-badge: #fbbd08;
--color-yellow-badge-bg: #fbbd081a;
--color-yellow-badge-hover-bg: #fbbd084d;
--color-orange-badge: #f2711c;
--color-orange-badge-bg: #f2711c1a;
--color-orange-badge-hover-bg: #f2711c4d;
--color-git: #f05133;
--color-body: #0d1117;
--color-box-header: #161b22;
--color-box-body: #11171f;
--color-box-body-highlight: #262b36;
--color-text-dark: #dbe0ea;
--color-text: #bbc0ca;
--color-text-light: #a6aab5;
--color-text-light-1: rgb(125, 133, 144);
--color-text-light-2: #8a8e99;
--color-text-light-3: #707687;
--color-footer: #010409;
--color-timeline: #4c525e;
--color-input-text: #d5dbe6;
--color-input-background: #2c2f35;
--color-input-toggle-background: #454a57;
--color-input-border: #2c2f35;
--color-input-border-hover: #505667;
--color-header-wrapper: #0d1117;
--color-header-wrapper-transparent: #20243000;
--color-light: #00000028;
--color-light-mimic-enabled: rgba(
0,
0,
0,
calc(40 / 255 * 222 / 255 / var(--opacity-disabled))
);
--color-light-border: #ffffff28;
--color-hover: #ffffff19;
--color-active: #ffffff24;
--color-menu: #0d1117;
--color-card: #0d1117;
--color-markup-table-row: #ffffff06;
--color-markup-code-block: #ffffff16;
--color-button: #1e252e;
--color-code-bg: #0d1117;
--color-code-sidebar-bg: #232834;
--color-shadow: #00000060;
--color-secondary-bg: #2c2f35;
--color-text-focus: #fff;
--color-expand-button: #3c404d;
--color-placeholder-text: #8a8e99;
--color-editor-line-highlight: var(--color-primary-light-5);
--color-project-board-bg: var(--color-secondary-light-2);
--color-caret: var(--color-text);
--color-reaction-bg: #ffffff12;
--color-reaction-hover-bg: var(--color-primary-light-4);
--color-reaction-active-bg: var(--color-primary-light-5);
--color-tooltip-text: #fff;
--color-tooltip-bg: #000000f0;
--color-nav-bg: #010409;
--color-nav-hover-bg: #383c47;
--color-label-text: #dfe3ec;
--color-label-bg: #7c84974b;
--color-label-hover-bg: #7c8497a0;
--color-label-active-bg: #7c8497;
--color-accent: var(--color-primary-light-1);
--color-small-accent: var(--color-primary-light-5);
--color-active-line: #534d1b;
accent-color: var(--color-accent);
color-scheme: dark;
}
.emoji[aria-label="check\ mark"],
.emoji[aria-label="currency\ exchange"],
.emoji[aria-label="TOP\ arrow"],
.emoji[aria-label="END\ arrow"],
.emoji[aria-label="ON! arrow"],
.emoji[aria-label="SOON\ arrow"],
.emoji[aria-label="heavy dollar sign"],
.emoji[aria-label="copyright"],
.emoji[aria-label="registered"],
.emoji[aria-label="trade\ mark"],
.emoji[aria-label="multiply"],
.emoji[aria-label="plus"],
.emoji[aria-label="minus"],
.emoji[aria-label="divide"],
.emoji[aria-label="curly\ loop"],
.emoji[aria-label="double curly loop"],
.emoji[aria-label="wavy\ dash"],
.emoji[aria-label="paw\ prints"],
.emoji[aria-label="musical\ note"],
.emoji[aria-label="musical\ notes"] {
filter: invert() hue-rotate(180deg);
}
.repository.file.list #repo-files-table tbody .svg.octicon-file-directory-fill,
.repository.file.list #repo-files-table tbody .svg.octicon-file-submodule {
color: #7d8590;
}

1
services/grafana/default.nix → services/grafana.nix
View file

@ -1,7 +1,6 @@
{ config, lib, pkgs, ... }:
{
imports = [ ../traefik/grafana.nix ];
services.grafana = {
enable = true;
settings = {

0
services/matrix/default.nix → services/matrix.nix
View file

16
services/navidrome.nix Normal file
View file

@ -0,0 +1,16 @@
{ pkgs, ... }: {
imports = [ ./caddy.nix ];
environment.systemPackages = with pkgs; [ ffmpeg ];
services = {
navidrome = {
enable = true;
settings = {
Address = "127.0.0.1";
Port = 4533;
MusicFolder = "/media/music";
};
};
caddy.virtualHosts."music.xenia.me.uk".extraConfig =
"reverse_proxy http://localhost:4533";
};
}

26
services/navidrome/default.nix
View file

@ -1,26 +0,0 @@
{ pkgs, ... }: {
imports = [ ../traefik/default.nix ];
environment.systemPackages = with pkgs; [ ffmpeg ];
services = {
navidrome = {
enable = true;
settings = {
Address = "127.0.0.1";
Port = 4533;
MusicFolder = "/media/music";
};
};
traefik.dynamicConfigOptions = {
http = {
routers.navidrome = {
rule = "Host(`music.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "navidrome-service";
tls = { certResolver = "default"; };
};
services.navidrome-service.loadBalancer.servers =
[{ url = "http://localhost:4533"; }];
};
};
};
}

7
services/nextcloud/default.nix → services/nextcloud.nix
View file

@ -1,7 +1,7 @@
{ pkgs, config, ... }:
{
imports = [ ../traefik/nextcloud.nix ];
imports = [ ./caddy.nix ];
services.nextcloud = {
enable = true;
package = pkgs.nextcloud27;
@ -41,4 +41,9 @@
addr = "localhost";
port = 8000;
}];
services.caddy.virtualHosts."cloud.xenia.me.uk".extraConfig = ''
redir /.well-known/carddav /remote.php/dav 301
redir /.well-known/caldav /remote.php/dav 301
reverse_proxy http://localhost:8000
'';
}

6
services/ntfy-sh/default.nix → services/ntfy-sh.nix
View file

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
{ ... }:
{
imports = [ ../traefik/ntfy-sh.nix ];
imports = [ ./caddy.nix ];
services.ntfy-sh = {
enable = true;
settings = {
@ -12,4 +12,6 @@
enable-metrics = true;
};
};
services.caddy.virtualHosts."ntfy.xenia.me.uk".extraConfig =
"reverse_proxy http://localhost:8800";
}

0
services/sshd/default.nix → services/sshd.nix
View file

10
services/syncthing/default.nix → services/syncthing.nix
View file

@ -1,7 +1,7 @@
{ config, lib, pkgs, user, ... }:
{ ... }:
let devices = [ "Ion" "Legion" "Northstar" "Ronin" "Vanguard" ];
in {
imports = [ ../traefik/syncthing.nix ];
imports = [ ./caddy.nix ];
services.syncthing = {
enable = true;
systemService = true;
@ -43,4 +43,10 @@ in {
};
};
};
services.caddy.virtualHosts."sync.xenia.me.uk".extraConfig = ''
basic_auth {
evie $apr1$LB0wVd6I$BHVPIyh.F5Ewt9/7PqAtS.
}
reverse_proxy http://localhost:8384
'';
}

16
services/traefik/adguardhome.nix
View file

@ -1,16 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions.http = {
routers.adguard = {
rule = "Host(`guard.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "adguard-webinterface";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
services.adguard-webinterface.loadBalancer.servers =
[{ url = "http://localhost:3200"; }];
};
}

62
services/traefik/default.nix
View file

@ -1,62 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ../fail2ban/traefik.nix ];
services.traefik = {
enable = true;
staticConfigOptions = {
api = { dashboard = true; };
entryPoints = {
http = {
address = ":80";
http.redirections.entryPoint = {
to = "https";
scheme = "https";
};
};
https.address = ":443";
traefik-internal.address = ":8080";
};
certificatesResolvers = {
default = {
acme = {
email = "evie@xenia.me.uk";
storage = "/var/lib/traefik/acme.json";
httpChallenge = { entryPoint = "http"; };
};
};
};
};
dynamicConfigOptions = {
tls.options.default.sniStrict = true;
http = {
routers = {
api = {
rule = "Host(`traefik.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "api@internal";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
api-internal = {
rule = "ClientIP(`192.168.0.0/16`)";
entryPoints = [ "traefik-internal" ];
service = "api@internal";
};
};
middlewares = {
auth.basicAuth.users =
[ "evie:$apr1$LB0wVd6I$BHVPIyh.F5Ewt9/7PqAtS." ];
hsts.headers = {
stsSeconds = "31536000";
stsIncludeSubdomains = true;
};
};
};
};
};
networking.firewall = {
enable = true;
allowedTCPPorts = [ 80 443 8080 ];
};
}

17
services/traefik/gitea.nix
View file

@ -1,17 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions = {
http = {
routers.gitea = {
rule = "Host(`git.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "gitea-websecure";
tls = { certResolver = "default"; };
};
services.gitea-websecure.loadBalancer.servers =
[{ url = "http://localhost:3100"; }];
};
};
}

16
services/traefik/grafana.nix
View file

@ -1,16 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions.http = {
routers.grafana = {
rule = "Host(`grafana.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "grafana-webinterface";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
services.grafana-webinterface.loadBalancer.servers =
[{ url = "http://localhost:3100"; }];
};
}

16
services/traefik/nextcloud.nix
View file

@ -1,16 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions.http = {
routers.nextcloud = {
rule = "Host(`cloud.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "nextcloud-webinterface";
middlewares = [ "hsts" ];
tls = { certResolver = "default"; };
};
services.nextcloud-webinterface.loadBalancer.servers =
[{ url = "http://localhost:8000"; }];
};
}

17
services/traefik/ntfy-sh.nix
View file

@ -1,17 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions = {
http = {
routers.ntfy-sh = {
rule = "Host(`ntfy.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "ntfy-sh-service";
tls = { certResolver = "default"; };
};
services.ntfy-sh-service.loadBalancer.servers =
[{ url = "http://localhost:8800"; }];
};
};
}

16
services/traefik/syncthing.nix
View file

@ -1,16 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions.http = {
routers.syncthing = {
rule = "Host(`sync.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "syncthing-webinterface";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
services.syncthing-webinterface.loadBalancer.servers =
[{ url = "http://localhost:8384"; }];
};
}