349 current 2025-10-12 11:50:40 25.05.20251006.20c4598 6.12.50 *

flake.nix

@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 348 current  2025-10-12 11:49:03  25.05.20251006.20c4598  6.12.50                          *
+# generation: 349 current  2025-10-12 11:50:40  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {

modules/homelab/services/arr/bazarr/default.nix

@@ -81,6 +81,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.mediastack = [{ 
       title = service; 

modules/homelab/services/arr/flaresolverr/default.nix

@@ -76,5 +76,13 @@ in
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
       };
     };
+
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
   };
 }

modules/homelab/services/arr/prowlarr/default.nix

@@ -83,6 +83,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.mediastack = [{ 
       title = service; 

modules/homelab/services/arr/radarr/default.nix

@@ -86,6 +86,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.mediastack = [{ 
       title = service; 

modules/homelab/services/arr/sonarr/default.nix

@@ -84,7 +84,7 @@ in
       };
     };
 
-    services.caddy.virtualHosts."sonarr.blakedheld.xyz" = {
+    services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
         tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
         reverse_proxy http://127.0.0.1:${toString cfg.port}

modules/homelab/services/audiobookshelf/default.nix

@@ -104,6 +104,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance public service
     modules.services.glance.links.mediastack = [{
       title = service;
@@ -112,14 +120,6 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
-#
-#    sops.secrets = {
-#      "${service}_" = {
-#        owner = "${service}";
-#        group = "${service}";
-#      };
-#    };
-
     # add to backups
     modules.system.backups.baks = {
       ${service} = { paths = [ cfg.data_dir ]; };

modules/homelab/services/gitea/default.nix

@@ -127,6 +127,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.services = [{
       title = service;

modules/homelab/services/glance/default.nix

@@ -249,6 +249,14 @@ in
 #      };
 #    };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to backups
     modules.system.backups.baks = {
       ${service} = { paths = [ cfg.data_dir ]; };

modules/homelab/services/home/homeassistant/default.nix

@@ -120,6 +120,15 @@ in
       };
     };
 
+
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.services = [{
       title = "home assistant";

modules/homelab/services/home/zigbee2mqtt/default.nix

@@ -121,6 +121,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.services = [{
       title = service;

modules/homelab/services/immich/default.nix

@@ -96,6 +96,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.services = [{
       title = service;

modules/homelab/services/jellyfin/default.nix

@@ -90,6 +90,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.mediastack = [{
       title = service;

modules/homelab/services/qbittorrent/default.nix

@@ -119,6 +119,14 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.mediastack = [{
       title = service;

modules/homelab/services/uptime-kuma/default.nix

@@ -93,6 +93,14 @@ in
 #      };
 #    };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.system = [{
       title = service;

modules/homelab/services/vaultwarden/default.nix

@@ -103,6 +103,15 @@ in
       };
     };
 
+    # add to caddy for reverse proxy
+    services.caddy.virtualHosts."${cfg.url}" = {
+      serverAliases = [ "pass.blakedheld.xyz" ];
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy http://127.0.0.1:${toString cfg.port}
+      '';
+    };
+
     # add to glance
     modules.services.glance.links.services = [{
       title = service;