mirror of
https://github.com/nmasur/dotfiles
synced 2024-12-27 11:04:52 +00:00
48 lines
1.3 KiB
Nix
48 lines
1.3 KiB
Nix
{ config, pkgs, lib, ... }: {
|
|
|
|
options = {
|
|
caddy.enable = lib.mkEnableOption "Caddy reverse proxy.";
|
|
caddy.routes = lib.mkOption {
|
|
type = lib.types.listOf lib.types.attrs;
|
|
description = "Caddy JSON routes for http servers";
|
|
default = [ ];
|
|
};
|
|
caddy.blocks = lib.mkOption {
|
|
type = lib.types.listOf lib.types.attrs;
|
|
description = "Caddy JSON error blocks for http servers";
|
|
default = [ ];
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf (config.caddy.enable && config.caddy.routes != [ ]) {
|
|
|
|
services.caddy = {
|
|
enable = true;
|
|
adapter = "''"; # Required to enable JSON
|
|
configFile = pkgs.writeText "Caddyfile" (builtins.toJSON {
|
|
apps.http.servers.main = {
|
|
listen = [ ":443" ];
|
|
routes = config.caddy.routes;
|
|
errors.routes = config.caddy.blocks;
|
|
# logs = { }; # Uncomment to collect access logs
|
|
};
|
|
logging.logs.main = {
|
|
encoder = { format = "console"; };
|
|
writer = {
|
|
output = "file";
|
|
filename = "${config.services.caddy.logDir}/caddy.log";
|
|
roll = true;
|
|
};
|
|
level = "INFO";
|
|
};
|
|
});
|
|
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
networking.firewall.allowedUDPPorts = [ 443 ];
|
|
|
|
};
|
|
|
|
}
|