gwg313/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updating traefik and others

Browse source
This commit is contained in:
gwg313 2025-04-03 01:49:35 -04:00
parent 649f32545a
commit 1b8687a703
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
16 changed files with 252 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

41
hosts/seikan/routes.nix
View file

@ -33,6 +33,24 @@
url = "https://scholarsome.zerotier.gwg313.xyz";
}
];
pastebin_zt.loadBalancer.servers = [
{
url = "https://pastebin.zerotier.gwg313.xyz";
}
];
snippets_zt.loadBalancer.servers = [
{
url = "https://snippets.zerotier.gwg313.xyz";
}
];
git_zt.loadBalancer.servers = [
{
url = "https://git.zerotier.gwg313.xyz";
}
];
};
routers = {
@ -77,6 +95,29 @@
middlewares = [ "headers" ];
};
pastebin_zt = {
entryPoints = [ "websecure" ];
rule = "Host(`pastebin.gwg313.xyz`)";
service = "pastebin_zt";
tls.certResolver = "le";
middlewares = [ "headers" ];
};
snippets_zt = {
entryPoints = [ "websecure" ];
rule = "Host(`snippets.gwg313.xyz`)";
service = "snippets_zt";
tls.certResolver = "le";
middlewares = [ "headers" ];
};
git_zt = {
entryPoints = [ "websecure" ];
rule = "Host(`git.gwg313.xyz`)";
service = "git_zt";
tls.certResolver = "le";
middlewares = [ "headers" ];
};
};
};
};

15
hosts/seikan/traefik.nix
View file

@ -13,6 +13,12 @@
group = config.users.users.traefik.group;
};
sops.secrets.basic-auth = {
mode = "0440";
owner = config.users.users.traefik.name;
group = config.users.users.traefik.group;
};
systemd.services.traefik.environment = {
CF_DNS_API_TOKEN_FILE = "${config.sops.secrets.cf-api-token.path}";
};
@ -69,10 +75,10 @@
http = {
routers = {
dashboard = {
rule = "Host(`monitor.local.gwg313.xyz`)";
rule = "Host(`monitor.gwg313.xyz`)";
service = "api@internal";
middlewares = [
# "auth"
"auth"
"headers"
];
entrypoints = [ "websecure" ];
@ -82,6 +88,11 @@
};
};
middlewares = {
auth = {
basicAuth = {
usersFile = "${config.sops.secrets.basic-auth.path}";
};
};
headers = {
headers = {
browserxssfilter = true;

3
hosts/seikan/zerotier.nix
View file

@ -16,5 +16,8 @@
10.147.17.246 recipes.zerotier.gwg313.xyz
10.147.17.246 scholarsome.zerotier.gwg313.xyz
10.147.17.246 bookmarks.zerotier.gwg313.xyz
10.147.17.246 pastebin.zerotier.gwg313.xyz
10.147.17.246 snippets.zerotier.gwg313.xyz
10.147.17.246 git.zerotier.gwg313.xyz
'';
}