secrets/cloudflared.pem.age

Reviewed

This is a binary file and will not be displayed.

+1

secrets/secrets.nix

Reviewed

··· 5 5 { 6 6 "libera-password.age".publicKeys = koi; 7 7 "jellyfin-rpc.json.age".publicKeys = koi; 8 8 + "cloudflared.pem.age".publicKeys = koi; 8 9 "tranquil.env.age".publicKeys = koi; 9 10 10 11 "email-pass-me.age".publicKeys = koi;

+25

systems/miku/services/cloudflared.nix

Reviewed

··· 1 1 + { pkgs, ... }: 2 2 + { 3 3 + age.secrets.cloudflared.file = ../../../secrets/cloudflared.pem.age; 4 4 + systemd.services.cloudflared = { 5 5 + description = "cloudflare tunnel"; 6 6 + after = [ "jellyfin.service" ]; 7 7 + wantedBy = [ "multi-user.target" ]; 8 8 + 9 9 + path = [ pkgs.cloudflared ]; 10 10 + 11 11 + script = '' 12 12 + export TUNNEL_ORIGIN_CERT=/run/agenix/cloudflared 13 13 + 14 14 + cloudflared=${pkgs.cloudflared}/bin/cloudflared 15 15 + token=$($cloudflared tunnel token jelly) 16 16 + 17 17 + $cloudflared tunnel run --protocol http2 --token $token 18 18 + ''; 19 19 + 20 20 + serviceConfig = { 21 21 + Restart = "on-failure"; 22 22 + RestartSec = 60; 23 23 + }; 24 24 + }; 25 25 + }

+1

systems/miku/services/default.nix

Reviewed

··· 3 3 ./logind.nix 4 4 ./beszel-agent.nix 5 5 ./jellyfin.nix 6 6 + ./cloudflared.nix 6 7 ./tranquil-pds.nix 7 8 ./seberjune.nix 8 9 ];