2024-10-21 12:31:30 +07:00
|
|
|
{
|
|
|
|
|
config,
|
|
|
|
|
lib,
|
|
|
|
|
unstable,
|
|
|
|
|
...
|
|
|
|
|
}:
|
2024-06-13 13:52:45 +07:00
|
|
|
let
|
|
|
|
|
cfg = config.profile.services.caddy;
|
2024-10-21 12:31:30 +07:00
|
|
|
inherit (lib)
|
|
|
|
|
mkIf
|
|
|
|
|
attrsets
|
|
|
|
|
strings
|
|
|
|
|
lists
|
|
|
|
|
;
|
2024-06-13 13:52:45 +07:00
|
|
|
in
|
|
|
|
|
{
|
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
|
services.caddy = {
|
|
|
|
|
enable = true;
|
2024-10-13 16:01:52 +07:00
|
|
|
package = unstable.caddy;
|
2024-06-13 13:52:45 +07:00
|
|
|
};
|
2024-06-13 20:52:45 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
services.caddy.globalConfig = # caddy
|
|
|
|
|
''
|
|
|
|
|
servers {
|
|
|
|
|
metrics
|
|
|
|
|
}
|
|
|
|
|
'';
|
2024-09-10 12:09:50 +07:00
|
|
|
|
2024-10-13 16:01:52 +07:00
|
|
|
environment.etc."caddy/static/tigor.web.id/index.html" = {
|
|
|
|
|
text =
|
|
|
|
|
let
|
2024-10-21 12:31:30 +07:00
|
|
|
domains = attrsets.mapAttrsToList (
|
|
|
|
|
name: _: strings.removePrefix "https://" name
|
|
|
|
|
) config.services.caddy.virtualHosts;
|
2024-10-13 16:01:52 +07:00
|
|
|
sortedDomains = lists.sort (a: b: a < b) domains;
|
2024-10-21 12:31:30 +07:00
|
|
|
list = map (
|
|
|
|
|
domain: # html
|
|
|
|
|
''
|
2024-10-13 16:01:52 +07:00
|
|
|
<div class="col-12 col-sm-6 col-md-4 col-lg-3 text-center align-middle">
|
|
|
|
|
<a href="https://${domain}">${domain}</a>
|
|
|
|
|
</div>
|
2024-10-21 12:31:30 +07:00
|
|
|
'') sortedDomains;
|
2024-10-13 16:01:52 +07:00
|
|
|
items = strings.concatStringsSep "\n" list;
|
|
|
|
|
in
|
2024-10-21 12:31:30 +07:00
|
|
|
# html
|
|
|
|
|
''
|
2024-10-13 16:01:52 +07:00
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html>
|
|
|
|
|
<head>
|
|
|
|
|
<title>Hosted Sites</title>
|
|
|
|
|
<link
|
|
|
|
|
rel="stylesheet"
|
|
|
|
|
href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css"
|
|
|
|
|
integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH"
|
|
|
|
|
crossorigin="anonymous">
|
|
|
|
|
</head>
|
|
|
|
|
<body class="container">
|
|
|
|
|
<h1 class="text-center">Hosted Sites</h1>
|
|
|
|
|
<div class="row g-4">
|
|
|
|
|
${items}
|
|
|
|
|
</div>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
|
|
|
|
'';
|
|
|
|
|
user = "caddy";
|
|
|
|
|
group = "caddy";
|
|
|
|
|
};
|
|
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
services.caddy.virtualHosts = {
|
|
|
|
|
"router.tigor.web.id".extraConfig = ''
|
|
|
|
|
@denied not remote_ip private_ranges
|
2024-09-16 08:34:40 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
respond @denied "Access denied" 403
|
2024-09-16 08:34:40 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
reverse_proxy 192.168.100.1
|
|
|
|
|
'';
|
|
|
|
|
"tigor.web.id".extraConfig = ''
|
|
|
|
|
root * /etc/caddy/static/tigor.web.id
|
|
|
|
|
file_server
|
|
|
|
|
'';
|
|
|
|
|
"crowfx.web.id".extraConfig = ''
|
|
|
|
|
root * /etc/caddy/static/tigor.web.id
|
|
|
|
|
file_server
|
|
|
|
|
'';
|
|
|
|
|
};
|
2024-09-16 08:34:40 +07:00
|
|
|
|
2024-09-16 10:32:43 +07:00
|
|
|
environment.etc."alloy/config.alloy".text =
|
2024-10-21 12:31:30 +07:00
|
|
|
# hcl
|
|
|
|
|
''
|
|
|
|
|
local.file_match "caddy_access_log" {
|
|
|
|
|
path_targets = [
|
|
|
|
|
{
|
|
|
|
|
"__path__" = "/var/log/caddy/*.log",
|
|
|
|
|
},
|
|
|
|
|
]
|
|
|
|
|
sync_period = "30s"
|
|
|
|
|
}
|
2024-09-16 10:32:43 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
loki.source.file "caddy_access_log" {
|
|
|
|
|
targets = local.file_match.caddy_access_log.targets
|
|
|
|
|
forward_to = [loki.process.caddy_access_log.receiver]
|
|
|
|
|
}
|
2024-09-16 10:32:43 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
loki.process "caddy_access_log" {
|
|
|
|
|
forward_to = [loki.write.default.receiver]
|
2024-09-16 10:32:43 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
stage.json {
|
|
|
|
|
expressions = {
|
|
|
|
|
level = "",
|
|
|
|
|
host = "request.host",
|
|
|
|
|
method = "request.method",
|
|
|
|
|
proto = "request.proto",
|
|
|
|
|
ts = "",
|
|
|
|
|
}
|
|
|
|
|
}
|
2024-09-16 10:32:43 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
stage.labels {
|
|
|
|
|
values = {
|
|
|
|
|
level = "",
|
|
|
|
|
host = "",
|
|
|
|
|
method = "",
|
|
|
|
|
proto = "",
|
|
|
|
|
}
|
|
|
|
|
}
|
2024-09-16 10:32:43 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
stage.label_drop {
|
|
|
|
|
values = ["service_name"]
|
|
|
|
|
}
|
2024-09-16 10:32:43 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
stage.static_labels {
|
|
|
|
|
values = {
|
|
|
|
|
job = "caddy_access_log",
|
|
|
|
|
}
|
2024-09-16 10:32:43 +07:00
|
|
|
}
|
2024-09-16 10:46:23 +07:00
|
|
|
|
2024-10-21 12:31:30 +07:00
|
|
|
stage.timestamp {
|
|
|
|
|
source = "ts"
|
|
|
|
|
format = "unix"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
'';
|
2024-06-13 13:52:45 +07:00
|
|
|
};
|
|
|
|
|
}
|
