From 83bf1be6c86f6d8ef506ba9d6046424f4ce18b69 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Sun, 30 Aug 2026 12:50:50 +0200
Subject: tower: WIP kanidm service

---
 hosts/tower/web/caddy.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'hosts/tower/web/caddy.nix')

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index 5979806..21e564b 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -26,6 +26,10 @@ let
     domain = config.services.cgit.internal.nginx.virtualHost;
     port = 1923;
   };
+  kanidm = {
+    domain = config.services.kanidm.server.settings.domain;
+    port = 8443;
+  };
   blog.port = 7291;
 
   tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key";
@@ -101,6 +105,16 @@ in
           }
         '';
       };
+
+      "${kanidm.domain}" = lib.mkIf config.services.kanidm.server.enable {
+        listenAddresses = [ wg-ip ];
+        extraConfig = ''
+          reverse_proxy :${toString kanidm.port} {
+            header_up True-Client-IP {remote_host}
+            header_up X-Real-IP {remote_host}
+          }
+        '';
+      };
     };
   };
 
-- 
cgit v1.3.1