tower: set up cgit-internal

1 files changed, 16 insertions, 0 deletions

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index f375d3b..5979806 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -22,6 +22,10 @@ let
     socket = config.services.phpfpm.pools.kanboard.socket;
     package = config.services.kanboard.package;
   };
+  cgitInternal = {
+    domain = config.services.cgit.internal.nginx.virtualHost;
+    port = 1923;
+  };
   blog.port = 7291;
 
   tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key";
@@ -85,6 +89,18 @@ in
           }
         '';
       };
+
+      "${cgitInternal.domain}" = {
+        listenAddresses = [ wg-ip ];
+        extraConfig = ''
+          ${tls-config}
+
+          reverse_proxy :${toString cgitInternal.port} {
+            header_up True-Client-IP {remote_host}
+            header_up X-Real-IP {remote_host}
+          }
+        '';
+      };
     };
   };