add jsonConfig to services

2025-03-12 15:21:38 +01:00
parent b97263495b
commit aa1e617e3a
5 changed files with 57 additions and 15 deletions
--- a/services/caddy/default.nix
+++ b/services/caddy/default.nix
@@ -1,3 +1,41 @@
-{
-  services.caddy.enable = true;
+{jsonConfig, ...}: {
+  services.caddy = {
+    enable = true;
+    virtualHosts = {
+      ${jsonConfig.domains.portainer} = {
+        extraConfig = ''
+          reverse_proxy localhost:9000
+          header {
+            # Security headers
+            Strict-Transport-Security "max-age=31536000; includeSubDomains"
+            X-Content-Type-Options "nosniff"
+            X-Frame-Options "DENY"
+            Referrer-Policy "strict-origin-when-cross-origin"
+          }
+        '';
+      };
+      ${jsonConfig.domains.n8n} = {
+        extraConfig = ''
+          reverse_proxy localhost:5678
+          header {
+            Strict-Transport-Security "max-age=31536000; includeSubDomains"
+            X-Content-Type-Options "nosniff"
+            X-Frame-Options "DENY"
+            Referrer-Policy "strict-origin-when-cross-origin"
+          }
+        '';
+      };
+      ${jsonConfig.domains.baserow} = {
+        extraConfig = ''
+          reverse_proxy localhost:3000
+          header {
+            Strict-Transport-Security "max-age=31536000; includeSubDomains"
+            X-Content-Type-Options "nosniff"
+            X-Frame-Options "DENY"
+            Referrer-Policy "strict-origin-when-cross-origin"
+          }
+        '';
+      };
+    };
+  };
 }