tower: WIP kanidm service

1 files changed, 14 insertions, 0 deletions

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index 5979806..21e564b 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -26,6 +26,10 @@ let
     domain = config.services.cgit.internal.nginx.virtualHost;
     port = 1923;
   };
+  kanidm = {
+    domain = config.services.kanidm.server.settings.domain;
+    port = 8443;
+  };
   blog.port = 7291;
 
   tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key";
@@ -101,6 +105,16 @@ in
           }
         '';
       };
+
+      "${kanidm.domain}" = lib.mkIf config.services.kanidm.server.enable {
+        listenAddresses = [ wg-ip ];
+        extraConfig = ''
+          reverse_proxy :${toString kanidm.port} {
+            header_up True-Client-IP {remote_host}
+            header_up X-Real-IP {remote_host}
+          }
+        '';
+      };
     };
   };