summaryrefslogtreecommitdiff
path: root/modules/server/networking/caddy.nix
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-20 05:36:20 -0700
committerFuwn <[email protected]>2024-09-20 05:36:20 -0700
commitd9747c64b038943253eaafdc59a49d5face46dab (patch)
treeb452d15a7f20e9f4bb70ec9f9040137bec1072f8 /modules/server/networking/caddy.nix
parenthimeji: move containers over from seti (diff)
downloadnixos-config-d9747c64b038943253eaafdc59a49d5face46dab.tar.xz
nixos-config-d9747c64b038943253eaafdc59a49d5face46dab.zip
modules: server and core modules
Diffstat (limited to 'modules/server/networking/caddy.nix')
-rw-r--r--modules/server/networking/caddy.nix28
1 files changed, 28 insertions, 0 deletions
diff --git a/modules/server/networking/caddy.nix b/modules/server/networking/caddy.nix
new file mode 100644
index 0000000..aae8fb7
--- /dev/null
+++ b/modules/server/networking/caddy.nix
@@ -0,0 +1,28 @@
+{
+ services.caddy = {
+ enable = true;
+
+ virtualHosts = {
+ "mayu.due.moe".extraConfig = "reverse_proxy localhost:8098";
+ "counter.due.moe".extraConfig = "reverse_proxy localhost:8098";
+ "bin.fuwn.me".extraConfig = "reverse_proxy localhost:8090";
+
+ "fuwn.me".extraConfig = ''
+ reverse_proxy localhost:8084
+
+ header Onion-Location http://fuwnme4wbs5x36jjf2usedw2zscozwhazykhyfkjsmudtb7egs3mb7yd.onion{path}
+
+ @blocked {
+ path /proxy/illegaldrugs.net/cgi-bin/news.php*
+ path /proxy/scholasticdiversity.us.to/scriptures/*
+ path /proxy/jsreed5.org/oeis/*
+ }
+ respond @blocked 403
+
+ @no_forwarded_for not header X-Forwarded-For *
+ request_header @no_forwarded_for X-Forwarded-For {remote_host}
+ respond /whoami {header.X-Forwarded-For} 200
+ '';
+ };
+ };
+}