This commit is contained in:
42
nixos/tako/services/kellnr.nix
Normal file
42
nixos/tako/services/kellnr.nix
Normal file
@@ -0,0 +1,42 @@
|
||||
# docker run --rm -it \
|
||||
# -p 8000:8000 \
|
||||
# -e "KELLNR_ORIGIN__HOSTNAME=kellnr.example.com" \
|
||||
# -v $(pwd):/opt/kdata ghcr.io/kellnr/kellnr:5
|
||||
{...}: let
|
||||
port = 8899;
|
||||
domain = "crates.darksailor.dev";
|
||||
in {
|
||||
virtualisation.oci-containers = {
|
||||
backend = "docker";
|
||||
containers = {
|
||||
excalidraw = {
|
||||
image = "ghcr.io/kellnr/kellnr:5";
|
||||
ports = ["127.0.0.1:${toString port}:8000"];
|
||||
volumes = [
|
||||
"/var/lib/kellnr:/opt/kdata"
|
||||
];
|
||||
environment = {
|
||||
"KELLNR_ORIGIN__HOSTNAME" = domain;
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
services.caddy.virtualHosts.domain.extraConfig = ''
|
||||
import auth
|
||||
reverse_proxy localhost:${toString port}
|
||||
'';
|
||||
services.authelia = {
|
||||
instances.darksailor = {
|
||||
settings = {
|
||||
access_control = {
|
||||
rules = [
|
||||
{
|
||||
inherit domain;
|
||||
policy = "one_factor";
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
Reference in New Issue
Block a user