fix nuc stuff
This commit is contained in:
@@ -22,13 +22,11 @@ let
|
|||||||
listToAttrs (map makeRouter cfg.reverseProxies);
|
listToAttrs (map makeRouter cfg.reverseProxies);
|
||||||
|
|
||||||
domain = "mjallen.dev";
|
domain = "mjallen.dev";
|
||||||
serverIp = "10.0.1.3";
|
|
||||||
|
|
||||||
# Forward services
|
# Forward services
|
||||||
authUrl = "http://${serverIp}:9000/outpost.goauthentik.io";
|
authUrl = "http://localhost:9000/outpost.goauthentik.io";
|
||||||
|
cacheUrl = "http://localhost:9012";
|
||||||
cacheUrl = "http://${serverIp}:9012";
|
hassUrl = "http://nuc-nixos.local:8123";
|
||||||
hassUrl = "http://10.0.1.4:8123";
|
|
||||||
|
|
||||||
# Plugins
|
# Plugins
|
||||||
traefikPlugins = {
|
traefikPlugins = {
|
||||||
@@ -57,8 +55,7 @@ let
|
|||||||
|
|
||||||
# misc
|
# misc
|
||||||
letsEncryptEmail = "jalle008@proton.me";
|
letsEncryptEmail = "jalle008@proton.me";
|
||||||
dataDir = "/media/nas/main/appdata/traefik";
|
configDir = "/media/nas/main/appdata";
|
||||||
authentikAddress = "http://${serverIp}:9000/outpost.goauthentik.io/auth/traefik";
|
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
imports = [ ./options.nix ];
|
imports = [ ./options.nix ];
|
||||||
@@ -133,7 +130,7 @@ in
|
|||||||
|
|
||||||
services.traefik = {
|
services.traefik = {
|
||||||
enable = true;
|
enable = true;
|
||||||
dataDir = dataDir;
|
dataDir = "${configDir}/traefik";
|
||||||
group = "jallen-nas"; # group;
|
group = "jallen-nas"; # group;
|
||||||
environmentFiles = [ config.sops.templates."traefik.env".path ];
|
environmentFiles = [ config.sops.templates."traefik.env".path ];
|
||||||
|
|
||||||
@@ -216,7 +213,7 @@ in
|
|||||||
authentik = {
|
authentik = {
|
||||||
forwardAuth = {
|
forwardAuth = {
|
||||||
tls.insecureSkipVerify = true;
|
tls.insecureSkipVerify = true;
|
||||||
address = authentikAddress;
|
address = "${authUrl}/auth/traefik";
|
||||||
trustForwardHeader = true;
|
trustForwardHeader = true;
|
||||||
authResponseHeaders = [
|
authResponseHeaders = [
|
||||||
"X-authentik-username"
|
"X-authentik-username"
|
||||||
|
|||||||
Reference in New Issue
Block a user