aboutsummaryrefslogtreecommitdiff
path: root/hosts/ganymede/caddy.nix
blob: 961b3b2b2a5461f92aee33b2c68dee286f571502 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
{
  pkgs,
  lib,
  hosts,
  config,
  ...
}: {
  users.users."caddy".extraGroups = ["fileserver"];

  services.caddy = {
    package = lib.mkForce (pkgs.caddy.withPlugins {
      plugins = [
        "github.com/tailscale/caddy-tailscale@v0.0.0-20251204171825-f070d146dd61"
        "github.com/caddy-dns/porkbun@v0.3.1"
      ];
      hash = "sha256-3BRyQ/fqPUemW1KqwyvkO1LeZB7PyBMIL/5a2u1mqqU=";
    });

    globalConfig = ''
      acme_dns porkbun {
        api_key {env.PORKBUN_API_KEY}
        api_secret_key {env.PORKBUN_API_SECRET_KEY}
      }

      pki {
        ca local {
          name "Ganymede Home CA"

          root {
              format pem_file
              cert ${pkgs.writeText "caddy-root-ca.crt" hosts.ganymede.caddy-root-ca}
              key ${config.collinux.secrets.caddy-root-ca-key.path}
          }
        }
      }
    '';

    virtualHosts = {
      "jta.williamsfam.us.com" = {
        logFormat = lib.mkForce ''
          output file /var/log/caddy/access-williamsfam.us.com.log
        '';
        extraConfig = ''
          root * /media/public/www/jta

          @hidden path */.*
          respond @hidden "Not Found" 404

          file_server
        '';
      };
      "lindsey.williamsfam.us.com" = {
        logFormat = lib.mkForce ''
          output file /var/log/caddy/access-williamsfam.us.com.log
        '';
        extraConfig = ''
          redir https://williams-ryan-lindsey.blogspot.com permanent
        '';
      };
      "daniel.williamsfam.us.com" = {
        logFormat = lib.mkForce ''
          output file /var/log/caddy/access-williamsfam.us.com.log
        '';
        extraConfig = ''
          root * /media/public/www/daniel
          file_server
        '';
      };
      "williamsfam.us.com" = {
        logFormat = lib.mkForce ''
          output file /var/log/caddy/access-williamsfam.us.com.log
        '';
        extraConfig = ''
          root * /media/public/www/root
          file_server
        '';
      };
    };
  };

  collinux.services.glance.homelabServices."website" = {
    url = "https://williamsfam.us.com";
    icon = "mdi:web";
  };
}