so mad

2026-06-11 12:40:44 +03:00 · 2025-08-07 01:46:58 +03:00
parent 185d6e22b4
commit de44801150
62 changed files with 5 additions and 43 deletions
@@ -0,0 +1,72 @@
+{ inputs, ... }@flakeContext:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  services = {
+    cloudflared = {
+      enable = false;
+      certificateFile = "${config.xlib.dirs.server-credentials}/cloudflared/cert.pem";
+      tunnels = {
+        "58b340ee-e98a-4af9-b786-74600c71f49e" = {
+          credentialsFile = "${config.xlib.dirs.server-credentials}/cloudflared/server.json";
+          warp-routing.enabled = true;
+          ingress = {
+            "immich.zeroq.ru" = {
+              service = "http://localhost:2283";
+            };
+            "nextcloud.zeroq.ru" = {
+              service = "http://localhost:10000";
+            };
+          };
+          default = "http_status:404";
+        };
+        #         "58b340ee-e98a-4af9-b786-74600c71f49e" = {
+        #           credentialsFile = "${config.xlib.dirs.server-credentials}/cloudflared/server.json";
+        #           warp-routing.enabled = true;
+        #           ingress = {
+        #             "nextcloud.zeroq.ru" = {
+        #               service = "http://localhost:10000";
+        #             };
+        #           };
+        #           default = "http_status:404";
+        #         };
+      };
+    };
+  };
+
+  #   users.users = {
+  #     cloudflared = {
+  #       group = "cloudflared";
+  #       isSystemUser = true;
+  #     };
+  #   };
+  #   users.groups.cloudflared = { };
+  #
+  #   systemd.services.cloudflared = {
+  #     after = [
+  #       "network.target"
+  #       "network-online.target"
+  #     ];
+  #     wants = [
+  #       "network.target"
+  #       "network-online.target"
+  #     ];
+  #     wantedBy = [ "multi-user.target" ];
+  #     serviceConfig = {
+  #       ExecStart = "${pkgs.cloudflared}/bin/cloudflared tunnel --no-autoupdate --config=${config.xlib.dirs.server-credentials}/cloudflared/config.yaml --origincert=${config.xlib.dirs.server-credentials}/cloudflared/cert.pem --credentials-file=${config.xlib.dirs.server-credentials}/cloudflared/server.json run";
+  #       Group = "root";
+  #       User = "root";
+  #       Restart = "on-failure";
+  #     };
+  #   };
+
+  environment = {
+    systemPackages = with pkgs; [
+      cloudflared
+    ];
+  };
+}