{tsuki/dosei}: set up wstunnel

This commit is contained in:
2024-06-29 02:14:31 +02:00
parent 8946e517a9
commit 09d0bc29e0
8 changed files with 538 additions and 3 deletions

View File

@@ -6,6 +6,7 @@
./services/avahi.nix
./services/docker.nix
./services/jenkins.nix
./services/wstunnel.nix
];
boot.loader.systemd-boot.enable = true;

View File

@@ -0,0 +1,27 @@
{ config, ... }:
{
imports = [
../../../modules/wstunnel.nix
];
disabledModules = [
"services/networking/wstunnel.nix"
];
# NOTE: Contains
# - WSTUNNEL_HTTP_UPGRADE_PATH_PREFIX
# - WSTUNNEL_RESTRICT_HTTP_UPGRADE_PATH_PREFIX
sops.secrets."wstunnel/http-upgrade-path-prefix-envvars" = {
sopsFile = ../../../secrets/common.yaml;
};
services.wstunnel = {
enable = true;
clients."ws-tsuki" = {
connectTo = "wss://ws.nani.wtf";
localToRemote = [
"tcp://10022:localhost:22"
];
environmentFile = config.sops.secrets."wstunnel/http-upgrade-path-prefix-envvars".path;
};
};
}