Services: add tailscale, kuma, vw and forgejo to Theia

This commit is contained in:
blahai 2025-01-26 23:22:46 +02:00
parent dcd2d8adab
commit 057582d665
No known key found for this signature in database
10 changed files with 168 additions and 5 deletions

View file

@ -121,7 +121,7 @@ in {
caddy.virtualHosts.${cfg.domain} = {
extraConfig = ''
reverse_proxy localhost:3000
reverse_proxy localhost:${toString cfg.port}
'';
};
};

View file

@ -24,7 +24,7 @@ in {
services.caddy.virtualHosts.${cfg.domain} = {
extraConfig = ''
reverse_proxy localhost:${cfg.port}
reverse_proxy localhost:${toString cfg.port}
'';
};
};

View file

@ -1 +1,54 @@
{}
{
lib,
config,
...
}: let
inherit (lib) template;
inherit (lib.modules) mkIf;
inherit (lib.services) mkServiceOption;
inherit (lib.secrets) mkSecret;
rdomain = config.networking.domain;
cfg = config.olympus.services.vaultwarden;
in {
options.olympus.services.vaultwarden = mkServiceOption "vaultwarden" {
port = 8222;
domain = "vault.${rdomain}";
};
config = mkIf cfg.enable {
age.secrets.vaultwarden-env = mkSecret {
file = "vaultwarden-env";
owner = "vaultwarden";
group = "vaultwarden";
};
services = {
vaultwarden = {
enable = true;
environmentFile = config.age.secrets.vaultwarden-env.path;
config = {
DOMAIN = "https://${cfg.domain}";
ROCKET_ADDRESS = cfg.host;
ROCKET_PORT = cfg.port;
extendedLogging = true;
invitationsAllowed = true;
useSyslog = true;
logLevel = "warn";
showPasswordHint = false;
SIGNUPS_ALLOWED = false;
signupsAllowed = false;
signupsDomainsWhitelist = "${rdomain}";
dataDir = "/var/lib/vaultwarden";
};
};
caddy.virtualHosts.${cfg.domain} = {
extraConfig = ''
reverse_proxy localhost:${toString cfg.port}
'';
};
};
};
}