56 lines
No EOL
1.2 KiB
Nix
56 lines
No EOL
1.2 KiB
Nix
|
|
services.traefik = {
|
|
enable = true;
|
|
|
|
staticConfigOptions = {
|
|
entryPoints = {
|
|
web = {
|
|
address = ":80";
|
|
asDefault = true;
|
|
http.redirections.entrypoint = {
|
|
to = "websecure";
|
|
scheme = "https";
|
|
};
|
|
};
|
|
|
|
websecure = {
|
|
address = ":443";
|
|
asDefault = true;
|
|
http.tls.certResolver = "letsencrypt";
|
|
};
|
|
};
|
|
|
|
log = {
|
|
level = "INFO";
|
|
filePath = "${config.services.traefik.dataDir}/traefik.log";
|
|
format = "json";
|
|
};
|
|
|
|
certificatesResolvers.letsencrypt.acme = {
|
|
email = "tulg@protonmail.ch";
|
|
storage = "${config.services.traefik.dataDir}/acme.json";
|
|
httpChallenge.entryPoint = "web";
|
|
};
|
|
|
|
api.dashboard = true;
|
|
# Access the Traefik dashboard on <Traefik IP>:8080 of your server
|
|
# api.insecure = true;
|
|
};
|
|
|
|
dynamicConfigOptions = {
|
|
http = {
|
|
routers.xray = {
|
|
rule = "Host(`v2.kittykat.poggerer.xyz`)";
|
|
entryPoints = [ "websecure" ];
|
|
service = "xray";
|
|
tls.certResolver = "letsencrypt";
|
|
};
|
|
|
|
services.myapp.loadBalancer.servers = [
|
|
{ url = "http://127.0.0.1:2053"; }
|
|
];
|
|
};
|
|
|
|
|
|
};
|
|
|