From fba04cf0a1274086b2aa0a1a70c1ac2b804493c0 Mon Sep 17 00:00:00 2001 From: Jimbo Date: Thu, 5 Sep 2024 00:43:31 -0400 Subject: [PATCH] The CloudflareD commit. To be undone immediately --- nixos/server.nix | 2 +- nixos/server/cloudflared.nix | 16 ++++++++++++++++ secrets.nix | Bin 1900 -> 2128 bytes 3 files changed, 17 insertions(+), 1 deletion(-) create mode 100644 nixos/server/cloudflared.nix diff --git a/nixos/server.nix b/nixos/server.nix index ec583dce..6acb0455 100644 --- a/nixos/server.nix +++ b/nixos/server.nix @@ -20,7 +20,7 @@ # Services ./services/openssh.nix ./server/acme.nix - ./server/ddclient.nix + ./server/cloudflared.nix ./server/docker.nix ./server/firewall.nix ./server/gitea.nix diff --git a/nixos/server/cloudflared.nix b/nixos/server/cloudflared.nix new file mode 100644 index 00000000..289b354d --- /dev/null +++ b/nixos/server/cloudflared.nix @@ -0,0 +1,16 @@ +{pkgs, outputs, ...}: { + services.cloudflared = { + enable = true; + tunnels = { + "${outputs.secrets.flareTunnelName}" = { + credentialsFile = "${pkgs.writeText "credentials" outputs.secrets.flareTunnelApi}"; + default = "http_status:404"; + ingress = { + "*.${outputs.secrets.jimDomain}" = { + service = "https://localhost:443"; + }; + }; + }; + }; + }; +} diff --git a/secrets.nix b/secrets.nix index dea9ce7de973c0752e71152e8bf6b4c44997097a..fb5c7674267449b4eac3a028342c25bfed446924 100644 GIT binary patch literal 2128 zcmZQ@_Y83kiVO&0VDXk)e0l5B1B$)ui}bh8Xl#lL{VD(K6X$K^13B&8cgnI8wWc>R zxGnd$w`xdey6|q!v--y?19;A^{kQJ6oa)B%KD+9uU*#Oxj=yS-*9NP9I51%eo73gP zJA11wJ@(t@O z%3w}%v{A3^ej~AY$J%SJG|U3Ou3EV_=f_jA)ANf}uSxEj@U3*kl3b3UJv(*R?z_T! z>~{25$s3b-G|xr533JJOiC)4YXU2YEdF_ve(|0C3Nc2hC9#a-b=F&C4LD8t9cL~Jjl0gaTKbgQ_Xba%TFqZO6(6{rV3?8S@7}dH zWvA&umpe5ZeIEWUsS8eZDKS*?Dnsh-;6isJUwNw^9D=uh1xEknpKNJ&umMS z2xxkudF}jD*29~Wj_4emudcZHVDr|R&8IT%t+bbab3NkEMz$lpIh&paCtIA1E178Z z^R>Z#(;0VLCpL<2vu!kN7HatLCbYfURo^&h-tqO7K|D)NWyI-hdanyxsOoD#M%Yl54zfLh?$qO_-G(vK4lziiX@)+qsPNs;_i=|+Oy;E8|DJcBMXh+MxyI%V)3H@A z_J<2(=W1U$6S`u-Ba@GLGmEA_y36BizfJD=ZS`BGj~_j4a#D|OH2b(x-MpdYzrEM7 zA4^%}Hy_N(=!^GuuMo7{$vSh5^mo@Ln^kk3bQR7$?!0o|!_0@LjP6`w)Y){^_`an( zzp1E6u&{ymvYhufPKlKUEHjgMJ2SQE*nx;fD_==_DUa`&VXQa@Y*P5y;q?eTJx>xm0pLvP& ziCt4q`b}e0vM7BarFHz;F`jOhone_LGnRJ0ioVge)HXV^w`J-fC$2-EU+S`$Zg@C- zd1uA)1e&&dv1O&8wd1*&gRR`juJZ+WkYG>_-KUPChj;R_T63%}xI$e||=B z#`s5F_>oNO;Hylb@}$mhM<%=XCf`u8$w^|G_Rn#{RR0{7#xE19ewcbLvUw;b*tyYzaZ|@~ zjwO4x-&|CmTG9LDrHvoMcecs7T`QEOqi61Px6vy5D7@JGjInsJV)Xp@+_Tef6`iUQ zIr~>4)lK}h^uNbnj$ep=_QtFB)TZ}uZ3+_JscV@hi2K;Sm=XLpV%vMwqABwi8hx`l zvHZ@jtMR3sQ_SqD77MxDDmnEnIaVn_rtJm)L(Z;FMT4gbZt}6V8MaIP>MUx#SWN6i zX2vbNeTQL+U*aaeeL1CN?9y{MR(`kSJ*(Sy^pjuH{slE(Z5y6#EBL$d@jB_4S5Mnc z9#8xDf4gSdJEvGB<5L}rme_OO{#m;B)7~!%IqcOYn)BAiSzO+~B=4HDCqLhf@8^Q7 zC+v<>nzhKeNZ#e!L(N$%Sq)pBCT!JQ`0Cx9%nB*Phh0)utNWb9eKp+-oUgBDdDWCA zb>X61<*j7_rQXjgUrE##v_D|>;|ti%b!ugf9Q&>1Pp7`B-CMY1w^@E8W0?k5wa2T! z)vlX=sg+#G`E8^l@wVZ-tRBa54fby@%XDVP2p(OwGCu8VpzLzD``;eNw77j$RP^ec z`}xbpmDv&I`+_9C&ivgxMNj4Wbn(eY#pbO`GTyqV;a8Me-tU=GP&pLz37W- z-{H`yIWz3~1J<~YoFW}tdwYco7Y7(EdYG(yz|Dr^{yN9rHKu-*_OHI)c>ekIO5f>M z1Q7A3tlW9d z*8S1}`R|s(bG}V`$kTT5#BI|FYbKknNecFUuxEZkky`WLXsH?{%Y9LD|9pRNzhYom zc<#3J6V~lEN@a)FskL@1^~UX~zN8U2!;2&_Cl&-dNUEsLi!Yic|f{Ie|S%~Hda zMy9(|ycG6}CcYFD)v`QzQgh#w>tCN<I`=)@7U*D3??X`0i{~&T` zY2%zH-lsNiymZr1WM$>wMa-3Z7yw{2* OC>X3*P-@b}qXhuhD_K*1&|L)OJ zpZ_b=q~)t@uF2ddmw%Z5{SkZk*_QIz_ZO|}Q?FZnI{!8Mf^|ucnuBxIQV(tXnkE!z4rtmsOZ-lU=`8QCdnqF25s8t$0NsUuHq7@+75e7F7ma z93c!{fBxDPCM?g>i^<;gZqK~n~Ks9Ux1 z>bQs>liE%<{Z-5H?LQv!c;lw-|4J*)E9MF;Ik)&UV+?1(H3w}8-r%`^mo2iKx#v@H zQD~R^=lRQh0Orlhd&(ZP<;xSXUp3dD?8C<+qk}Y@k zWtNz}ecNCB5BGTRS%8JFUuRB3BLmOtM4f$p4Q;FRyY9NJ3tw6y`BZuTye!UShV_$# zjx}>U(=VMX^QU);|NN=qQaU|TMCQ$WdFI_}$6e{~<%KKdj~#k^bgPNV^NH?hJRw)k zK6qwy<%jUxRtb3qm)-rD6Anh%?mngRTD7kHhK=+_^%?GRCtrU|n-JIckpF8D+d=LJ zo%t#=cnh01_%Ln>be$!(UZhkgzMenS8h6bN(r^jUd z>Fi2=>mMLJv9VO1!=U4X%)gCaKOGi*U|ZIhu-^vFzmh)USI1*=E zb=2W&E3r_pKe%Duir@q09>+Q=Ew3)T^!0XzRs7R0`MlqHt3SQua4cVvq7t#ZUa4f~ z!i(OE??bq)gw=r$y>foee>t}^ADbhWu;yl?vbu9sgR)!s ziiNjD!d6X7k}bW`zomEgr}w@GzUZ#rF;!OR&^ghkGP@$WpJYGZ=lt**Q|$4;)`GCe z@SWFR&)F7ivgFsYbj8^prthDBU~ih6hvlsO0kRV(?b)l)%T%hYkj3+Iazx$T91-qa zMV}<2C$!$3Xs$l3@s_7-2tnNyFy!g|tf2Atb z+nLSl3jFVGYAn+8msz|`cq+FQx0z$lJfX)%`&M60Y>Wt37I%5T()CtHQLl+HztyxU zefPz8l?uH&Yi}yc#pO?wy8C(F-TnvjuPlEr`Zav|EVD-;|x|iB5uf9^- z6vesFM>g+$ij82{+9@qU_P*NRcSdg6$bMydd&ImL5052Y&#&HUIN$%TJ!aSAOx^WM zerNNZs?M?68JSgk+1g6`lqTJ&z)z{T>aW(VL})4=j6x#Uu!S4iP@{5-p&>E&7|sUSRzLi`}5W9 zyfLpd(h{q!|1aOT>idR0|5vFL{%|=gA`sg!C8X`Y&;1fjDf?wQAtf@lA2VkZo4m5R zwX(8i>c0F8m$PRlFnsCx#rIwnE}lq2OU>sIe%e@3shbAamI&O zeuF7D6AHr0EjV^xZB;XA?~L`@++v<$GwVd3h|!1RJXWb;J~fwa$j<3f_U1mp+BP#T zXeFE3hg{E}m4{j^8v|cI-7{rJm3!9X39k;uFhu>I#Z$0zPsO&$b&Ji;21`vo|HCQa z^!yp6hK(6pN*->u_#hpeL=Gk(_ zaCG-Y@1M5tcH;}12DRY$>)Zc3c)MPVY2n~_skXvGV@mnUrzMK3`ku&|t55zCdr55` z>%?x6>}m7d&%4_P&YctM-%xdZZb;YP`^&kG9Oz#ht?Y2L@^+#_`Cqr6O5gHqe#Mx? fhRzT^erAH8QETju-CQj`TgzKQ-+Yo~_u2~p)q$^4