Nico
93f912d548
moves all secrets into one centralised location in /media/secrets and uses systemd-tmpfiles to set the appropriate permissions for them
27 lines
551 B
Nix
27 lines
551 B
Nix
{ config, ... }:
|
|
|
|
{
|
|
services.uptime-kuma = {
|
|
enable = true;
|
|
appriseSupport = true;
|
|
settings = {
|
|
UPTIME_KUMA_PORT = "8026";
|
|
};
|
|
};
|
|
|
|
systemd.tmpfiles.rules = [
|
|
"d /media/secrets/uptime-kuma 0700 root root"
|
|
];
|
|
|
|
fileSystems."/var/lib/private/uptime-kuma" = {
|
|
device = "/media/apps/uptime-kuma";
|
|
options = [ "bind" ];
|
|
};
|
|
|
|
services.caddy.virtualHosts."status.${config.homelab.domain}" = {
|
|
useACMEHost = config.homelab.domain;
|
|
extraConfig = ''
|
|
reverse_proxy http://localhost:8026
|
|
'';
|
|
};
|
|
}
|