summaryrefslogtreecommitdiff
path: root/modules/nixos
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos')
-rw-r--r--modules/nixos/headscale.nix39
1 files changed, 22 insertions, 17 deletions
diff --git a/modules/nixos/headscale.nix b/modules/nixos/headscale.nix
index a4c9308..bde6fae 100644
--- a/modules/nixos/headscale.nix
+++ b/modules/nixos/headscale.nix
@@ -15,27 +15,32 @@ in {
};
};
- nginx.virtualHosts.${subDomain} = {
- forceSSL = true;
- enableACME = true;
- locations."/" = {
- proxyPass =
- "http://localhost:${toString config.services.headscale.port}";
- proxyWebsockets = true;
- };
- };
- };
+ # nginx.virtualHosts.${subDomain} = {
+ # forceSSL = true;
+ # enableACME = true;
+ # locations."/" = {
+ # proxyPass =
+ # "http://localhost:${toString config.services.headscale.port}";
+ # proxyWebsockets = true;
+ # };
+ # };
+ # };
+
+ # environment.systemPackages = [ config.services.headscale.package ];
- environment.systemPackages = [ config.services.headscale.package ];
+ # security.acme = {
+ # acceptTerms = true;
+ # email = "devin.finlinson@pm.me";
+ # };
- security.acme = {
- acceptTerms = true;
+ services.caddy = {
+ enable = true;
email = "devin.finlinson@pm.me";
+ virtualHosts.${subDomain}.extraConfig = ''
+ reverse_proxy http://localhost:${toString config.services.headscale.port}
+ '';
};
- networking.firewall.allowedTCPPorts = [
- 80
- 443
- ];
+ networking.firewall.allowedTCPPorts = [ 80 443 ];
}