blob: fe1e90f8c27ffe7262616d970618f36cc70f7bab (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
{
pkgs,
lib,
hosts,
config,
...
}: {
users.users."caddy".extraGroups = ["fileserver"];
services.caddy = {
package = lib.mkForce (pkgs.caddy.withPlugins {
plugins = [
"github.com/tailscale/caddy-tailscale@v0.0.0-20251204171825-f070d146dd61"
"github.com/caddy-dns/porkbun@v0.3.1"
];
hash = "sha256-3BRyQ/fqPUemW1KqwyvkO1LeZB7PyBMIL/5a2u1mqqU=";
});
globalConfig = ''
acme_dns porkbun {
api_key {env.PORKBUN_API_KEY}
api_secret_key {env.PORKBUN_API_SECRET_KEY}
}
pki {
ca local {
name "Ganymede Home CA"
root {
format pem_file
cert ${pkgs.writeText "caddy-root-ca.crt" hosts.ganymede.caddy-root-ca}
key ${config.collinux.secrets.caddy-root-ca-key.path}
}
}
}
'';
virtualHosts = {
"jta.williamsfam.us.com" = {
logFormat = lib.mkForce ''
output file /var/log/caddy/access-williamsfam.us.com.log
'';
extraConfig = ''
root * /media/public/www/jta
@hidden path */.*
respond @hidden "Not Found" 404
file_server
'';
};
"lindsey.williamsfam.us.com" = {
logFormat = lib.mkForce ''
output file /var/log/caddy/access-williamsfam.us.com.log
'';
extraConfig = ''
redir https://williams-ryan-lindsey.blogspot.com permanent
'';
};
"daniel.williamsfam.us.com" = {
logFormat = lib.mkForce ''
output file /var/log/caddy/access-williamsfam.us.com.log
'';
extraConfig = ''
root * /media/public/www/daniel
file_server
'';
};
"williamsfam.us.com" = {
logFormat = lib.mkForce ''
output file /var/log/caddy/access-williamsfam.us.com.log
'';
extraConfig = ''
root * /media/public/www/root
file_server
'';
};
# collin's stuff
"static.williamsfam.us.com" = {
logFormat = lib.mkForce ''
output file /var/log/caddy/access-williamsfam.us.com.log
'';
extraConfig = ''
root * /media/public/www/static
file_server
@allowed_origins header_regexp Origin ^https?://([a-z0-9-]+)\.(williamsfam\.us\.com|ganymede)(:[0-9]+)?$
header @allowed_origins Access-Control-Allow-Origin "{header.Origin}"
header @allowed_origins Vary "Origin"
'';
};
"collin.williamsfam.us.com" = {
logFormat = lib.mkForce ''
output file /var/log/caddy/access-williamsfam.us.com.log
'';
extraConfig = ''
root * /media/public/www/collin
try_files {path} {path}.html {path}/index.html
file_server
'';
};
# "git.collin.williamsfam.us.com" = {
# logFormat = lib.mkForce ''
# output file /var/log/caddy/access-williamsfam.us.com.log
# '';
# extraConfig = ''
# '';
# };
};
};
collinux.services.glance.homelabServices."website" = {
url = "https://williamsfam.us.com";
icon = "mdi:web";
};
}
|
