nixos/caddy.nix
Jakub Dorfman fe4d3f4432 feat: add panel configuration with API service and Caddy integration
Co-authored-by: Copilot <copilot@github.com>
2026-04-28 22:54:36 +02:00

28 lines
696 B
Nix
Executable file

{ config, pkgs, ... }:
{
services.caddy = {
enable = true;
email = "admin@srazka.com";
# Generated app routes from the panel backend.
extraConfig = ''
import /var/lib/containers/routes/routes.caddy
'';
# Authelia's own login portal
virtualHosts."auth.srazka.com".extraConfig = ''
reverse_proxy 127.0.0.1:9091
'';
# Every protected site uses this snippet
virtualHosts."hello.srazka.com".extraConfig = ''
forward_auth 127.0.0.1:9091 {
uri /api/authz/forward-auth
copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
}
reverse_proxy 192.168.100.11:80
'';
};
}