mirror of
https://github.com/anotherhadi/nixy.git
synced 2026-04-02 19:12:11 +02:00
32 lines
829 B
Nix
32 lines
829 B
Nix
# Cloudflared tunnel configuration for NixOS
|
|
# It allows exposing services securely via Cloudflare Tunnel
|
|
{
|
|
config,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
sops.secrets.cloudflared-token.mode = "0400";
|
|
|
|
# To setup cloudflared, run:
|
|
# - `cloudflared tunnel login`
|
|
# - `cloudflared tunnel create YourTunnelName`
|
|
#
|
|
# This will create a credentials file & give you the tunnel ID to use below.
|
|
services.cloudflared = {
|
|
enable = true;
|
|
tunnels."f7c8f777-a36c-4b9a-b6e3-6a112bd43e73" = {
|
|
credentialsFile = config.sops.secrets."cloudflared-token".path;
|
|
default = "http_status:404";
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
cloudflared
|
|
];
|
|
|
|
# At the moment (2025), for support of browser rendering of the tunnels, this line is required:
|
|
services.openssh.settings.Macs = [
|
|
"hmac-sha2-256"
|
|
];
|
|
}
|