notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

traefik: flesh out config options

Browse source
This commit is contained in:
notohh 2023-05-13 23:20:57 -04:00
parent b53c9d597d
commit 9d7150f864
Signed by: notohh
GPG key ID: BD47506D475EE86D
1 changed files with 42 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

46
modules/services/traefik.nix
View file

@ -1,5 +1,5 @@
{...}: {
networking.firewall.allowedTCPPorts = [80 443];
networking.firewall.allowedTCPPorts = [80 443 8080];
services.traefik = {
enable = true;
@ -7,15 +7,33 @@
dynamicConfigOptions = {
http = {
routers = {
homepage = {
rule = "Host(`dashboard.lab`)";
api = {
rule = "PathPrefix(`/api/`)";
entryPoints = ["websecure"];
service = "homepage";
service = "api@internal";
};
homepage = {
rule = "Host(`homepage.lab`)";
entrypoints = ["web"];
service = "homepage@docker";
};
searxng = {
rule = "Host(`test`)";
entrypoints = ["web"];
service = "searxng@docker";
};
hugo = {
rule = "Host(``)";
entryPoints = ["websecure"];
service = "hugo@docker";
};
};
};
};
staticConfigOptions = {
api.dashboard = true;
api.insecure = true;
providers.docker = true;
global = {
checkNewVersion = false;
sendAnonymousUsage = false;
@ -24,6 +42,26 @@
websecure.address = ":443";
web.address = ":80";
};
certificatesResolvers = {
staging.acme = {
email = "x3xr6n66@notohh.dev";
storage = "/var/lib/traefik/acme.json";
caServer = "https://acme-staging-v02.api.letsencrypt.org/directory";
dnsChallenge = {
provider = "cloudflare";
delayBeforeCheck = 0;
};
};
production.acme = {
email = "x3xr6n66@notohh.dev";
storage = "/var/lib/traefik/acme.json";
caServer = "https://acme-v02.api.letsencrypt.org/directory";
dnsChallenge = {
provider = "cloudflare";
delayBeforeCheck = 0;
};
};
};
};
};
}