genebean/dots
1
0
Fork 0
mirror of https://github.com/genebean/dots.git synced 2026-03-27 09:27:44 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

ddclient and real domain

Browse source
This commit is contained in:
Gene Liverman 2024-04-05 14:46:18 -04:00
parent 8e1b2bb05e
commit 28f2b32c20
1 changed files with 27 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

28
modules/hosts/nixos/nixnuc/containers/nginx-proxy.nix
View file

@ -3,6 +3,7 @@
https_port = 8444; https_port = 8444;
gandi_api = "${config.sops.secrets.gandi_api.path}"; gandi_api = "${config.sops.secrets.gandi_api.path}";
#gandi_dns_pat = "${config.sops.secrets.gandi_dns_pat.path}"; #gandi_dns_pat = "${config.sops.secrets.gandi_dns_pat.path}";
home_domain = "home.technicalissues.us";
in { in {
sops.secrets.gandi_api = { sops.secrets.gandi_api = {
sopsFile = ../../../../system/common/secrets.yaml; sopsFile = ../../../../system/common/secrets.yaml;
@ -17,6 +18,31 @@ in {
# ]; # ];
#}; #};
##
## Gandi (gandi.net)
##
## Single host update
# protocol=gandi
# zone=example.com
# password=my-gandi-access-token
# use-personal-access-token=yes
# ttl=10800 # optional
# myhost.example.com
services.ddclient = {
enable = true;
protocol = "gandi";
zone = "technicalissues.us";
domains = [ home_domain ];
username = "unused";
extraConfig = ''
#usev4=webv4,webv4=ipify-ipv4
usev4=webv4
usev6=webv6
#use-personal-access-token=yes
ttl=300
'';
passwordFile = gandi_api; };
containers.nginx-proxy = { containers.nginx-proxy = {
bindMounts."${gandi_api}".isReadOnly = true; bindMounts."${gandi_api}".isReadOnly = true;
#bindMounts."${gandi_dns_pat}".isReadOnly = true; #bindMounts."${gandi_dns_pat}".isReadOnly = true;
@ -34,7 +60,7 @@ in {
recommendedTlsSettings = true; recommendedTlsSettings = true;
virtualHosts = { virtualHosts = {
"nix-tester.h.technicalissues.us" = { "nix-tester.${home_domain}" = {
default = true; default = true;
listen = [ listen = [
{ port = http_port; addr = "0.0.0.0"; } { port = http_port; addr = "0.0.0.0"; }