113 lines
3.2 KiB
Nix
113 lines
3.2 KiB
Nix
{ inputs, ... }:
|
|
{
|
|
imports = [ "${inputs.self}/modules/mizukios/features/caddy/common.nix" ];
|
|
|
|
services.caddy = {
|
|
virtualHosts."http://natsu.icn.mizuki.guru".extraConfig = ''
|
|
respond "우응" 200
|
|
'';
|
|
virtualHosts."https://file.mizuki.guru".extraConfig = ''
|
|
reverse_proxy 10.11.8.112 {
|
|
header_up Host {host}
|
|
header_up X-Real-IP {remote_host}
|
|
header_up X-Forwarded-For {remote_host}
|
|
}
|
|
'';
|
|
virtualHosts."http://file.mizuki.guru".extraConfig = ''
|
|
reverse_proxy 10.11.8.112 {
|
|
header_up Host {host}
|
|
header_up X-Real-IP {remote_host}
|
|
header_up X-Forwarded-For {remote_host}
|
|
}
|
|
'';
|
|
|
|
virtualHosts."auth.mizuki.guru".extraConfig = ''
|
|
reverse_proxy 10.11.8.102:9080
|
|
'';
|
|
|
|
virtualHosts."plutos.dazzle.st".extraConfig = ''
|
|
reverse_proxy localhost:13000
|
|
'';
|
|
|
|
virtualHosts."event.dazzle.st".extraConfig = ''
|
|
reverse_proxy localhost:9794
|
|
'';
|
|
|
|
virtualHosts."pve.hikari.icn.mizuki.guru".extraConfig = ''
|
|
reverse_proxy https://10.11.8.100:8006 {
|
|
header_up X-Real-Ip {remote_host}
|
|
header_up X-Http-Version {http.request.proto}
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
'';
|
|
|
|
virtualHosts."cockpit.hikari.icn.mizuki.guru".extraConfig = ''
|
|
reverse_proxy https://10.11.8.100:9090 {
|
|
header_up X-Real-Ip {remote_host}
|
|
header_up X-Http-Version {http.request.proto}
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
'';
|
|
|
|
virtualHosts."paste.mizuki.guru".extraConfig = ''
|
|
reverse_proxy 10.11.8.102:11108
|
|
'';
|
|
virtualHosts."komodo.mizuki.guru".extraConfig = ''
|
|
reverse_proxy 10.11.8.102:9120
|
|
'';
|
|
|
|
virtualHosts."ena.mizuki.guru".extraConfig = ''
|
|
basic_auth {
|
|
imnyang $2a$10$zA83XKt84pcXiwfkuvNmKOpQ5Cw0IP6m/.1AX0ahkVQaPOzrmFlxm
|
|
}
|
|
reverse_proxy 10.20.31.103:3000
|
|
'';
|
|
|
|
virtualHosts."akiyama.mizuki.guru".extraConfig = ''
|
|
rewrite / /index.avif
|
|
root * /var/static/akiyama.mizuki.guru
|
|
file_server
|
|
'';
|
|
|
|
virtualHosts."chef.mizuki.guru".extraConfig = ''
|
|
root * /var/static/chef.mizuki.guru
|
|
rewrite / /CyberChef_v10.22.1.html
|
|
file_server {
|
|
precompressed br gzip
|
|
}
|
|
header {
|
|
Cache-Control "public, max-age=31536000"
|
|
}
|
|
'';
|
|
|
|
virtualHosts."blog.imnya.ng".extraConfig = ''
|
|
reverse_proxy 127.0.0.1:4321
|
|
'';
|
|
|
|
virtualHosts."cfwithoutincident.imnya.ng".extraConfig = ''
|
|
reverse_proxy 127.0.0.1:31774
|
|
'';
|
|
|
|
virtualHosts."pass.imnya.ng".extraConfig = ''
|
|
reverse_proxy 127.0.0.1:10302
|
|
'';
|
|
|
|
virtualHosts."netbird.mizuki.guru".extraConfig = ''
|
|
# Native gRPC (needs HTTP/2 cleartext to backend)
|
|
@grpc header Content-Type application/grpc*
|
|
reverse_proxy @grpc h2c://127.0.0.1:8081
|
|
|
|
# Combined server paths (relay, signal, management, OAuth2)
|
|
@backend path /relay* /ws-proxy/* /api/* /oauth2/*
|
|
reverse_proxy @backend 127.0.0.1:8081
|
|
|
|
# Dashboard (everything else)
|
|
reverse_proxy /* 127.0.0.1:8080
|
|
'';
|
|
|
|
};
|
|
}
|