+custom services

services/caddy/hosts/baserow.nix

@@ -0,0 +1,13 @@
+{jsonConfig, ...}: {
+  ${jsonConfig.domains.baserow} = {
+    extraConfig = ''
+      reverse_proxy localhost:3000
+      header {
+        Strict-Transport-Security "max-age=31536000; includeSubDomains"
+        X-Content-Type-Options "nosniff"
+        X-Frame-Options "DENY"
+        Referrer-Policy "strict-origin-when-cross-origin"
+      }
+    '';
+  };
+}

services/caddy/hosts/n8n.nix

@@ -0,0 +1,13 @@
+{jsonConfig, ...}: {
+  ${jsonConfig.domains.n8n} = {
+    extraConfig = ''
+      reverse_proxy localhost:5678
+      header {
+        Strict-Transport-Security "max-age=31536000; includeSubDomains"
+        X-Content-Type-Options "nosniff"
+        X-Frame-Options "DENY"
+        Referrer-Policy "strict-origin-when-cross-origin"
+      }
+    '';
+  };
+}

services/caddy/hosts/portainer.nix

@@ -0,0 +1,14 @@
+{jsonConfig, ...}: {
+  ${jsonConfig.domains.portainer} = {
+    extraConfig = ''
+      reverse_proxy localhost:9000
+      header {
+        # Security headers
+        Strict-Transport-Security "max-age=31536000; includeSubDomains"
+        X-Content-Type-Options "nosniff"
+        X-Frame-Options "DENY"
+        Referrer-Policy "strict-origin-when-cross-origin"
+      }
+    '';
+  };
+}