hosts/sakura/services/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./traefik.nix
     ./authelia.nix
+    ./hugo.nix
     ./forgejo.nix
     ./rustypaste.nix
     ./woodpecker.nix

hosts/sakura/services/hugo.nix

@@ -0,0 +1,13 @@
+{pkgs, ...}: {
+  environment.systemPackages = with pkgs; [hugo];
+  virtualisation.oci-containers.containers.hugo = {
+    image = "klakegg/hugo:0.111.3-ext-ubuntu";
+    cmd = ["server"];
+    volumes = [
+      "/home/notoh/docker/hugo:/src"
+    ];
+    ports = [
+      "1313:1313"
+    ];
+  };
+}

hosts/sakura/services/traefik.nix

@@ -30,6 +30,21 @@
             entrypoints = ["web"];
             service = "dashdot";
           };
+          authelia = {
+            rule = "Host(`passport.notohh.dev`)";
+            entrypoints = ["websecure"];
+            service = "authelia";
+            tls.domains = [{main = "*.notohh.dev";}];
+            tls.certresolver = "production";
+          };
+          hugo = {
+            rule = "Host(`notohh.dev`)";
+            entrypoints = ["websecure"];
+            service = "hugo";
+            tls.domains = [{main = "*.notohh.dev";}];
+            tls.certresolver = "production";
+            middlewares = "authelia";
+          };
           foundryvtt = {
             rule = "Host(`foundry.flake.sh`)";
             entrypoints = ["websecure"];
@@ -81,7 +96,9 @@
           };
         };
         services = {
+          authelia.loadBalancer.servers = [{url = "http://localhost:9091";}];
           dashdot.loadBalancer.servers = [{url = "http://localhost:4000";}];
+          hugo.loadBalancer.servers = [{url = "http://localhost:1313";}];
           foundryvtt.loadBalancer.servers = [{url = "http://localhost:30000";}];
           forgejo.loadBalancer.servers = [{url = "http://localhost:3200";}];
           rustypaste.loadBalancer.servers = [{url = "http://localhost:8000";}];
@@ -106,6 +123,7 @@
         };
         web = {
           address = ":80";
+          forwardedHeaders.insecure = true;
         };
       };
       metrics = {

hosts/sora/services/traefik.nix

@@ -46,19 +46,11 @@
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
           };
-          authelia = {
-            rule = "Host(`passport.notohh.dev`)";
-            entrypoints = ["websecure"];
-            service = "authelia";
-            tls.domains = [{main = "*.notohh.dev";}];
-            tls.certresolver = "production";
-          };
         };
         services = {
           uptime-kuma.loadBalancer.servers = [{url = "http://100.87.54.48:4000";}];
           gotify.loadBalancer.servers = [{url = "http://100.87.54.48:3000";}];
           conduit.loadBalancer.servers = [{url = "http://100.121.201.47:6167";}];
-          authelia.loadBalancer.servers = [{url = "http://100.121.201.47:9091";}];
         };
       };
     };

modules/nix.nix

@@ -20,6 +20,7 @@ _: {
       warn-dirty = false;
       auto-optimise-store = true;
       builders-use-substitutes = true;
+      keep-derivations = true;
       keep-outputs = true;
       allowed-users = ["@wheel"];
       trusted-users = ["root" "@wheel"];