mirror of
https://github.com/anotherhadi/nixy.git
synced 2026-05-20 13:22:34 +02:00
Hadi
38 lines
1004 B
Nix
38 lines
1004 B
Nix
# Cloudflared tunnel configuration for NixOS
|
|
# It allows exposing services securely via Cloudflare Tunnel
|
|
{
|
|
config,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
sops.secrets.cloudflared-token.mode = "0400";
|
|
|
|
# To setup cloudflared, run:
|
|
# - `cloudflared tunnel login`
|
|
# - `cloudflared tunnel create YourTunnelName`
|
|
#
|
|
# This will create a credentials file & give you the tunnel ID to use below.
|
|
services.cloudflared = {
|
|
enable = true;
|
|
tunnels."${config.var.tunnelId}" = {
|
|
credentialsFile = config.sops.secrets."cloudflared-token".path;
|
|
default = "http_status:404";
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
cloudflared
|
|
];
|
|
|
|
systemd.services."cloudflared-tunnel-${config.var.tunnelId}" = {
|
|
wantedBy = ["multi-user.target"];
|
|
after = ["network-online.target"];
|
|
wants = ["network-online.target"];
|
|
};
|
|
|
|
# At the moment (2025), for support of browser rendering of the tunnels, this line is required:
|
|
services.openssh.settings.Macs = [
|
|
"hmac-sha2-256"
|
|
];
|
|
}
|