Added boilerplate for lldap and handle wildcard certificates for tbmrs.nl

This commit is contained in:
2025-04-26 12:23:41 +02:00
parent 8dbddaf62d
commit af39ac1be4
5 changed files with 79 additions and 10 deletions

View File

@@ -18,6 +18,7 @@ in {
config = mkIf cfg.enable {
services.podman.containers.caddy = {
image = "localhost/tboomers/caddy-custom:latest";
network = "proxy";
ports = [
"1080:80"
"1443:443"
@@ -30,16 +31,21 @@ in {
};
home.file."containers/caddy/Caddyfile".text = ''
{
acme_dns transip xeovalyte /etc/caddy/acme_key
}
tbmrs.nl {
respond "Hello there"
}
*.tbmrs.nl, tbmrs.nl {
tls {
dns transip xeovalyte /etc/caddy/acme_key
resolvers 1.1.1.1
}
http://tbmrs.nl {
respond "Hello there"
@root host tbmrs.nl
handle @root {
respond "Hello there"
}
@lldap host ldap.tbmrs.nl
handle @lldap {
reverse_proxy lldap:17170
}
}
'';
};