mirror of
https://github.com/gensokyo-zone/infrastructure.git
synced 2026-02-09 20:39:18 -08:00
29 lines
1.1 KiB
Nix
29 lines
1.1 KiB
Nix
{ config, lib, ... }: let
|
|
inherit (lib) mapAttrs' nameValuePair splitString last;
|
|
inherit (config) services;
|
|
inherit (services.kanidm.serverSettings) domain;
|
|
in {
|
|
sops.secrets.cloudflared-tunnel-apartment.owner = services.cloudflared.user;
|
|
services.cloudflared = {
|
|
enable = true;
|
|
tunnels = {
|
|
"131222b0-9db0-4168-96f5-7d45ec51c3be" = {
|
|
credentialsFile = config.sops.secrets.cloudflared-tunnel-apartment.path;
|
|
default = "http_status:404";
|
|
ingress = mapAttrs' (prefix: nameValuePair "${prefix}${domain}") {
|
|
"" = "http://localhost:80";
|
|
"home." = "http://localhost:${toString services.home-assistant.config.http.server_port}";
|
|
"z2m." = "http://localhost:80";
|
|
"login." = "http://localhost:${toString services.vouch-proxy.settings.vouch.port}";
|
|
"id." = let
|
|
inherit (services.kanidm.serverSettings) bindaddress;
|
|
port = last (splitString ":" bindaddress);
|
|
in {
|
|
service = "https://127.0.0.1:${port}";
|
|
originRequest.noTLSVerify = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|