alexion/dev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(nixos): model local routes as HTTP routes

Browse Source
This commit is contained in:
alexion
2026-09-15 19:37:27 -04:00
parent 4f6ade4ed5
commit 7f11154ceb
4 changed files with 36 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
configs/nixos/modules/services/reverse-proxy.nix
View File

@@ -9,59 +9,46 @@ let
mkRegistryPath = registryName: host: entry: "registry.${registryName}.${host}.${entry}";
mkBackend = address: route: "http://${address}:${toString route.port}";
mkBackend = address: port: "http://${address}:${toString port}";
mkPublicVirtualHost = host: entry:
mkVirtualHost = host: entry: mode:
let
compositeEntry = registry.join host entry;
route = compositeEntry.route;
address = compositeEntry.address or (throw "no matching entry in registry.address for ${mkRegistryPath "route" host entry}");
isHttp = mode == "http";
port = if isHttp then route.http.port else route.port;
in
{
inherit host entry;
registryName = "route";
name = route.domain;
value = {
forceSSL = true;
enableACME = true;
locations."/".proxyPass = mkBackend address route;
forceSSL = !isHttp;
enableACME = !isHttp;
locations."/".proxyPass = mkBackend address port;
};
};
mkLocalVirtualHost = host: entry:
let
compositeEntry = registry.join host entry;
route = compositeEntry.local-route;
address = compositeEntry.address or (throw "no matching entry in registry.address for ${mkRegistryPath "local-route" host entry}");
in
{
inherit host entry;
registryName = "local-route";
name = route.domain;
value = {
forceSSL = false;
enableACME = false;
locations."/".proxyPass = mkBackend address route;
};
};
generatedPublicVirtualHostList = lib.concatLists (
generatedHttpsVirtualHostList = lib.concatLists (
lib.mapAttrsToList (
host: routes:
lib.mapAttrsToList (entry: _route: mkPublicVirtualHost host entry) (
lib.mapAttrsToList (entry: _route: mkVirtualHost host entry "https") (
lib.filterAttrs (_entry: route: route.port != null) routes
)
) registry.route
);
generatedLocalVirtualHostList = lib.concatLists (
generatedHttpVirtualHostList = lib.concatLists (
lib.mapAttrsToList (
host: routes:
lib.mapAttrsToList (entry: _route: mkLocalVirtualHost host entry) routes
) registry.local-route
lib.mapAttrsToList (entry: _route: mkVirtualHost host entry "http") (
lib.filterAttrs (_entry: route: route.http.port != null) routes
)
) registry.route
);
generatedVirtualHostList = generatedPublicVirtualHostList ++ generatedLocalVirtualHostList;
generatedVirtualHostList = generatedHttpsVirtualHostList ++ generatedHttpVirtualHostList;
virtualHostsByDomain = lib.foldl' (
acc: virtualHost:
@@ -76,7 +63,7 @@ let
domain: virtualHosts:
if lib.length virtualHosts > 1 then
[
"duplicate reverse-proxy domain ${domain} in ${lib.concatMapStringsSep " and " (virtualHost: mkRegistryPath virtualHost.registryName virtualHost.host virtualHost.entry) virtualHosts}"
"duplicate route domain ${domain} in ${lib.concatMapStringsSep " and " (virtualHost: mkRegistryPath virtualHost.registryName virtualHost.host virtualHost.entry) virtualHosts}"
]
else
[ ]