nix-flakes/hosts/server/natsu/services/caddy.nix
imnyang ef16538956
Some checks failed
CI / check (push) Has been cancelled
CI / ida (push) Has been cancelled
CI / cpt (push) Has been cancelled
CI / build-nixos (ena) (push) Has been cancelled
CI / build-nixos (hako) (push) Has been cancelled
CI / build-nixos (kazusa) (push) Has been cancelled
CI / build-nixos (mizuki) (push) Has been cancelled
wow
2026-07-04 14:05:59 +09:00

389 lines
11 KiB
Nix

{ pkgs, ... }:
let
streamPlayer = pkgs.writeTextDir "index.html" ''
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Mizuki Stream</title>
<style>
:root {
color-scheme: dark;
--bg: #101114;
--panel: #191b20;
--panel-strong: #22252c;
--text: #f5f3ee;
--muted: #aaa49b;
--line: #363943;
--accent: #f08a92;
--accent-strong: #ffb45c;
}
* {
box-sizing: border-box;
}
body {
margin: 0;
min-height: 100vh;
background:
radial-gradient(circle at 20% 0%, rgba(240, 138, 146, 0.16), transparent 30rem),
linear-gradient(135deg, #101114 0%, #17191d 48%, #202026 100%);
color: var(--text);
font-family:
Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI",
sans-serif;
}
main {
width: min(1120px, calc(100vw - 32px));
min-height: 100vh;
margin: 0 auto;
display: grid;
grid-template-rows: auto 1fr auto;
gap: 20px;
padding: 24px 0;
}
header,
footer {
display: flex;
align-items: center;
justify-content: space-between;
gap: 16px;
}
h1 {
margin: 0;
font-size: clamp(1.45rem, 3vw, 2.25rem);
font-weight: 760;
letter-spacing: 0;
}
.status {
min-width: 7.5rem;
border: 1px solid var(--line);
border-radius: 999px;
padding: 8px 12px;
background: rgba(25, 27, 32, 0.78);
color: var(--muted);
text-align: center;
font-size: 0.875rem;
}
.status.live {
border-color: rgba(240, 138, 146, 0.65);
color: var(--text);
}
.stage {
display: grid;
align-content: center;
gap: 16px;
}
.player {
overflow: hidden;
border: 1px solid var(--line);
border-radius: 8px;
background: #050506;
box-shadow: 0 22px 70px rgba(0, 0, 0, 0.34);
}
video {
display: block;
width: 100%;
aspect-ratio: 16 / 9;
max-height: calc(100vh - 190px);
background: #050506;
}
form {
display: grid;
grid-template-columns: minmax(0, 1fr) auto;
gap: 10px;
padding: 12px;
border: 1px solid var(--line);
border-radius: 8px;
background: rgba(25, 27, 32, 0.82);
}
input,
button {
min-height: 42px;
border-radius: 6px;
font: inherit;
}
input {
width: 100%;
border: 1px solid var(--line);
background: var(--panel-strong);
color: var(--text);
padding: 0 12px;
}
button {
border: 0;
background: linear-gradient(135deg, var(--accent), var(--accent-strong));
color: #1b1110;
font-weight: 760;
padding: 0 18px;
cursor: pointer;
}
footer {
color: var(--muted);
font-size: 0.875rem;
}
code {
color: var(--text);
}
@media (max-width: 680px) {
main {
width: min(100vw - 20px, 1120px);
padding: 12px 0;
gap: 12px;
}
header,
footer {
align-items: flex-start;
flex-direction: column;
}
form {
grid-template-columns: 1fr;
}
video {
max-height: none;
}
}
</style>
</head>
<body>
<main>
<header>
<h1>Mizuki Stream</h1>
<div id="status" class="status">Idle</div>
</header>
<section class="stage">
<div class="player">
<video id="video" controls playsinline></video>
</div>
<form id="controls">
<input id="source" name="source" type="url" autocomplete="off" />
<button type="submit">Play</button>
</form>
</section>
<footer>
<span id="now">/live/stream/stream.m3u8</span>
<span><code>rtmp://stream.mizuki.guru:1935/live</code></span>
</footer>
</main>
<script src="https://cdn.jsdelivr.net/npm/hls.js@1.6.7/dist/hls.min.js"></script>
<script>
const video = document.getElementById("video");
const form = document.getElementById("controls");
const source = document.getElementById("source");
const status = document.getElementById("status");
const now = document.getElementById("now");
let hls;
function defaultSource() {
const params = new URLSearchParams(window.location.search);
const app = params.get("app") || "live";
const stream = params.get("stream") || "stream";
return params.get("src") || "/" + app + "/" + stream + "/" + stream + ".m3u8";
}
function setStatus(text, isLive) {
status.textContent = text;
status.classList.toggle("live", isLive);
}
function play(url) {
const absolute = new URL(url, window.location.href).toString();
source.value = absolute;
now.textContent = new URL(absolute).pathname;
setStatus("Loading", false);
if (hls) {
hls.destroy();
hls = null;
}
if (video.canPlayType("application/vnd.apple.mpegurl")) {
video.src = absolute;
video.play().catch(() => setStatus("Ready", false));
setStatus("Live", true);
return;
}
if (window.Hls && Hls.isSupported()) {
hls = new Hls({ lowLatencyMode: true });
hls.loadSource(absolute);
hls.attachMedia(video);
hls.on(Hls.Events.MANIFEST_PARSED, () => {
setStatus("Live", true);
video.play().catch(() => setStatus("Ready", false));
});
hls.on(Hls.Events.ERROR, (_, data) => {
if (data.fatal) setStatus("Offline", false);
});
return;
}
setStatus("Unsupported", false);
}
form.addEventListener("submit", (event) => {
event.preventDefault();
play(source.value);
});
play(defaultSource());
</script>
</body>
</html>
'';
in
{
services.caddy = {
enable = true;
virtualHosts."http://natsu.icn.mizuki.guru".extraConfig = ''
respond "" 200
'';
virtualHosts."https://file.mizuki.guru".extraConfig = ''
reverse_proxy 10.11.8.112 {
header_up Host {host}
header_up X-Real-IP {remote_host}
header_up X-Forwarded-For {remote_host}
}
'';
virtualHosts."http://file.mizuki.guru".extraConfig = ''
reverse_proxy 10.11.8.112 {
header_up Host {host}
header_up X-Real-IP {remote_host}
header_up X-Forwarded-For {remote_host}
}
'';
virtualHosts."auth.mizuki.guru".extraConfig = ''
reverse_proxy 10.11.8.102:9080
'';
virtualHosts."plutos.dazzle.st".extraConfig = ''
reverse_proxy epc.hikari.mizuki.arpa:3000
'';
virtualHosts."event.dazzle.st".extraConfig = ''
reverse_proxy 10.11.8.102:9794
'';
virtualHosts."pve.hikari.icn.mizuki.guru".extraConfig = ''
reverse_proxy https://10.11.8.100:8006 {
header_up X-Real-Ip {remote_host}
header_up X-Http-Version {http.request.proto}
transport http {
tls_insecure_skip_verify
}
}
'';
virtualHosts."cockpit.hikari.icn.mizuki.guru".extraConfig = ''
reverse_proxy https://10.11.8.100:9090 {
header_up X-Real-Ip {remote_host}
header_up X-Http-Version {http.request.proto}
transport http {
tls_insecure_skip_verify
}
}
'';
virtualHosts."cache.mizuki.guru".extraConfig = ''
reverse_proxy 127.0.0.1:5000
'';
virtualHosts."paste.mizuki.guru".extraConfig = ''
reverse_proxy 10.11.8.102:11108
'';
virtualHosts."komodo.mizuki.guru".extraConfig = ''
reverse_proxy 10.11.8.102:9120
'';
virtualHosts."ena.mizuki.guru".extraConfig = ''
basic_auth {
imnyang $2a$10$zA83XKt84pcXiwfkuvNmKOpQ5Cw0IP6m/.1AX0ahkVQaPOzrmFlxm
}
reverse_proxy 10.20.31.103:3000
'';
virtualHosts."akiyama.mizuki.guru".extraConfig = ''
rewrite / /index.avif
root * /var/static/akiyama.mizuki.guru
file_server
'';
virtualHosts."chef.mizuki.guru".extraConfig = ''
root * /var/static/chef.mizuki.guru
rewrite / /CyberChef_v10.22.1.html
file_server {
precompressed br gzip
}
header {
Cache-Control "public, max-age=31536000"
}
'';
virtualHosts."blog.imnya.ng".extraConfig = ''
reverse_proxy 127.0.0.1:4321
'';
virtualHosts."stream.mizuki.guru".extraConfig = ''
@hls path_regexp hls ^/[^/]+/[^/]+/[^/]+\.(m3u8|ts)$
reverse_proxy @hls 127.0.0.1:10023
root * ${streamPlayer}
try_files {path} /index.html
file_server
'';
virtualHosts."netbird.mizuki.guru".extraConfig = ''
# Native gRPC (needs HTTP/2 cleartext to backend)
@grpc header Content-Type application/grpc*
reverse_proxy @grpc h2c://127.0.0.1:8081
# Combined server paths (relay, signal, management, OAuth2)
@backend path /relay* /ws-proxy/* /api/* /oauth2/*
reverse_proxy @backend 127.0.0.1:8081
# Dashboard (everything else)
reverse_proxy /* 127.0.0.1:8080
'';
package = pkgs.caddy.withPlugins {
plugins = [
"github.com/caddy-dns/cloudflare@v0.2.2"
"github.com/aksdb/caddy-cgi/v2@v2.2.6"
"github.com/shift72/caddy-geo-ip@v0.6.0"
"github.com/lolPants/caddy-requestid@v1.1.2"
"github.com/WeidiDeng/caddy-cloudflare-ip@v0.0.0-20231130002422-f53b62aa13cb"
"github.com/caddyserver/ntlm-transport@v0.1.2"
"github.com/ueffel/caddy-brotli@v1.6.0"
"github.com/RussellLuo/caddy-ext/ratelimit@v0.3.0"
"github.com/neodyme-labs/user_agent_parse@v0.0.1"
];
hash = "sha256-YqOyHxPIKreCSkXfJUWTEFi+xOlIIiDqy3bYt7/A6Rg=";
};
};
}