satr14/nix-flake
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move tunnels to options.nix

Browse source
This commit is contained in:
Satria 2026-04-13 08:03:22 +07:00
commit 74754554e8
2 changed files with 10 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

7
lib/options.nix
View file

@ -46,6 +46,13 @@ in {
[ "SearXNG" "searxng" "https://search.proxy.${domain}" "http://localhost:8091/" ]
[ "Dockge" "docker" "https://containers.proxy.${domain}" "http://localhost:5001/" ]
];
routes = {
"git.${domain}" = "http://localhost:5080";
"auth.${domain}" = "http://localhost:1411";
"dash.${domain}" = "http://localhost:5070";
"media.${domain}" = "http://localhost:8096";
"gallery.${domain}" = "http://localhost:2284";
};
proxy = {
base = "proxy.${domain}";
hosts = {

14
modules/system/homelab/tunnels.nix
View file

@ -1,19 +1,11 @@
{ pkgs, lib, homelab, ... }: let
routes = {
"git.${homelab.domain}" = "http://localhost:5080";
"auth.${homelab.domain}" = "http://localhost:1411";
"dash.${homelab.domain}" = "http://localhost:5070";
"media.${homelab.domain}" = "http://localhost:8096";
"gallery.${homelab.domain}" = "http://localhost:2284";
};
in {
{ pkgs, lib, homelab, ... }: {
services.cloudflared = {
enable = true;
tunnels.homelab = {
credentialsFile = "/mnt/data/cloudflared/homelab.json";
certificateFile = "/mnt/data/cloudflared/cert.pem";
default = "http_status:404";
ingress = routes;
ingress = homelab.routes;
};
};
@ -32,6 +24,6 @@ in {
script = lib.concatMapStringsSep "\n" (domain: ''
echo "Ensuring DNS route for ${domain}..."
${pkgs.cloudflared}/bin/cloudflared tunnel --origincert /mnt/data/cloudflared/cert.pem route dns ${homelab.cf-tunnel-id} ${domain} || true
'') (builtins.attrNames routes);
'') (builtins.attrNames homelab.routes);
};
}