tharos/caddy.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

{ self, ... }:
{
  flake.domain = "heimfeld.hamburg";
  flake.machines.tharos = {
    nixos =
      { ... }:
      {
        networking.firewall.allowedTCPPorts = [
          80
          443
        ];

        services.caddy = {
          enable = true;
          email = "redaktion@${self.domain}";
          globalConfig = ''
            metrics {
              per_host
            }
          '';
        };
        services.prometheus.scrapeConfigs = [
          {
            job_name = "caddy";
            static_configs = [
              {
                targets = [ "localhost:2019" ];
              }
            ];
          }
        ];
      };

    vm =
      { pkgs, ... }:
      {
        services.caddy.globalConfig = ''
          local_certs
        '';

        systemd.services.caddy.path = [ pkgs.nssTools ]; # Irrelevante Warnung unterdrücken
      };
  };
}