kanboard: init

1 files changed, 26 insertions, 0 deletions

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index fa5d7b7..ae471e1 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -17,6 +17,11 @@ let
     domain = "music.sorre.internal";
     port = config.services.navidrome.settings.Port;
   };
+  kanboard = {
+    domain = config.services.kanboard.domain;
+    socket = config.services.phpfpm.pools.kanboard.socket;
+    package = config.services.kanboard.package;
+  };
   blog.port = 7291;
 in
 {
@@ -57,6 +62,27 @@ in
           file_server
         '';
       };
+
+      "${kanboard.domain}" = {
+        listenAddresses = [ wg-ip ];
+        extraConfig = ''
+          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+
+          root ${kanboard.package}/share/kanboard
+          php_fastcgi unix/${kanboard.socket}
+          file_server
+
+          @assets path *.js *.css *.ttf *.woff *.woff2 *.png *.jpg *.jpeg *.svg
+          header @assets {
+            Cache-Control "public, max-age=15778463"
+            X-Content-Type-Options "nosniff"
+            X-Robots-Tag "none"
+            X-Download-Options "noopen"
+            X-Permitted-Cross-Domain-Policies "none"
+            Referrer-Policy "no-referrer"
+          }
+        '';
+      };
     };
   };