mirror of
https://github.com/gensokyo-zone/infrastructure.git
synced 2026-02-09 20:39:18 -08:00
35 lines
1.2 KiB
Nix
35 lines
1.2 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
access,
|
|
...
|
|
}: let
|
|
inherit (lib.modules) mkMerge;
|
|
inherit (config.services) home-assistant nginx;
|
|
cfg = config.services.cloudflared;
|
|
apartment = "5e85d878-c6b2-4b15-b803-9aeb63d63543";
|
|
in {
|
|
sops.secrets.cloudflared-tunnel-apartment.owner = cfg.user;
|
|
services.cloudflared = {
|
|
tunnels = {
|
|
${apartment} = {
|
|
credentialsFile = config.sops.secrets.cloudflared-tunnel-apartment.path;
|
|
default = "http_status:404";
|
|
ingress = mkMerge [
|
|
(nginx.virtualHosts.zigbee2mqtt.proxied.cloudflared.getIngress {})
|
|
(nginx.virtualHosts.grocy.proxied.cloudflared.getIngress {})
|
|
(nginx.virtualHosts.barcodebuddy.proxied.cloudflared.getIngress {})
|
|
(
|
|
if nginx.virtualHosts.home-assistant.proxied.enable or false != false
|
|
then (nginx.virtualHosts.home-assistant.proxied.cloudflared.getIngress {})
|
|
else {
|
|
${home-assistant.domain} = assert home-assistant.enable && home-assistant.reverseProxy.enable; {
|
|
service = access.proxyUrlFor {serviceName = "home-assistant";};
|
|
};
|
|
}
|
|
)
|
|
];
|
|
};
|
|
};
|
|
};
|
|
}
|