tower: ...set up vaultwarden fr

1 files changed, 11 insertions, 1 deletions

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index ed11339..4260064 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -1,15 +1,25 @@
 { config, lib, ... }:
 let
   cfg = config.services.caddy;
+
+  vw = {
+    domain = config.services.vaultwarden.domain;
+    port = config.services.vaultwarden.config.ROCKET_PORT;
+  };
 in
 {
   services.caddy = {
     enable = true;
     virtualHosts = {
-      "${config.services.vaultwarden.domain}" = {
+      "${vw.domain}" = {
         listenAddresses = [ "100.64.0.6" ];
         extraConfig = ''
           tls {$CREDENTIALS_DIRECTORY}/sagittarius.cert {$CREDENTIALS_DIRECTORY}/sagittarius.key
+
+          reverse_proxy 127.0.0.1:${toString vw.port} {
+            header_up True-Client-IP {remote_host}
+            header_up X-Real-IP {remote_host}
+          }
         '';
       };
     };