infrastructure/systems/tei/cloudflared.nix
2024-09-20 22:22:56 -07:00

27 lines
888 B
Nix

{
config,
lib,
...
}: let
inherit (lib.modules) mkMerge;
inherit (config.services) nginx;
cfg = config.services.cloudflared;
apartment = "5e85d878-c6b2-4b15-b803-9aeb63d63543";
in {
sops.secrets.cloudflared-tunnel-apartment.owner = cfg.user;
services.cloudflared = {
tunnels = {
${apartment} = {
credentialsFile = config.sops.secrets.cloudflared-tunnel-apartment.path;
default = "http_status:404";
ingress = mkMerge [
(nginx.virtualHosts.zigbee2mqtt.proxied.cloudflared.getIngress {})
(nginx.virtualHosts.grocy.proxied.cloudflared.getIngress {})
(nginx.virtualHosts.barcodebuddy.proxied.cloudflared.getIngress {})
(nginx.virtualHosts.home-assistant.proxied.cloudflared.getIngress {})
(nginx.virtualHosts.taskchampion.proxied.cloudflared.getIngress {})
];
};
};
};
}