mlaga97/mlaga97-nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Major refactor of fortress config

Browse source
This commit is contained in:
Lauren Lagarde 2025-08-03 18:10:24 -05:00
parent 74929a0aa6
commit 72d51d403a
5 changed files with 239 additions and 226 deletions
Download patch file Download diff file Expand all files Collapse all files

40
systems/fortress/haproxy.nix Normal file
View file

@ -0,0 +1,40 @@
{ ... }: {
users.groups.haproxy.gid = 99;
users.users.haproxy = {
uid = 99;
group = "haproxy";
};
sops.secrets = {
"dotspace/pki/lagarde.dev.pem" = {
mode = "0660";
owner = "haproxy";
group = "haproxy";
};
"dotspace/pki/mlaga97.space.pem" = {
mode = "0660";
owner = "haproxy";
group = "haproxy";
};
"dotspace/pki/bauble.boutique.pem" = {
mode = "0660";
owner = "haproxy";
group = "haproxy";
};
};
virtualisation.oci-containers.containers.haproxy = {
image = "haproxy:2.6-alpine";
ports = [
"80:80"
"443:443"
"8448:8448"
"9980:9980"
];
volumes = [
"/run/secrets/dotspace/pki:/certs"
"/home/lauren_lagarde/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg" # TODO
];
};
}