feat(caddy): install and replace nginx

This commit is contained in:
wi11-holdsworth 2026-01-14 23:45:35 +11:00
parent 500c704cf4
commit 33af7eaadf
27 changed files with 212 additions and 158 deletions

View file

@ -5,6 +5,7 @@
}:
let
port = 5021;
certloc = "/var/lib/acme/fi33.buzz";
in
{
virtualisation.oci-containers = {
@ -48,11 +49,12 @@ in
};
};
services.nginx.virtualHosts."upbank2firefly.fi33.buzz" = {
forceSSL = true;
useACMEHost = "fi33.buzz";
locations."/".proxyPass = "http://localhost:${toString port}";
};
services.caddy.virtualHosts."upbank2firefly.fi33.buzz".extraConfig = ''
reverse_proxy localhost:${toString port}
tls ${certloc}/cert.pem ${certloc}/key.pem {
protocols tls1.3
}
'';
age.secrets.upbank2firefly.file = ../../../secrets/upbank2firefly.age;
}