From 00d46b6bd65101e8580fa593ba9c6c20c3596939 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Tue, 19 May 2026 22:56:52 +0200 Subject: [PATCH] Tunnel vault.rubenhensen.nl through Hetzner --- dns/domains/rubenhensen.nl.yaml | 2 +- nix-infra-machine/nodes/node001.nix | 11 +++++++++++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/dns/domains/rubenhensen.nl.yaml b/dns/domains/rubenhensen.nl.yaml index f17d235..354701d 100644 --- a/dns/domains/rubenhensen.nl.yaml +++ b/dns/domains/rubenhensen.nl.yaml @@ -30,7 +30,7 @@ records: - name: "vault" expire: 300 type: A - content: "62.41.87.114" + content: "46.224.26.65" - name: "rss" expire: 300 type: A diff --git a/nix-infra-machine/nodes/node001.nix b/nix-infra-machine/nodes/node001.nix index 2c8c7aa..354d425 100644 --- a/nix-infra-machine/nodes/node001.nix +++ b/nix-infra-machine/nodes/node001.nix @@ -55,6 +55,7 @@ in map $ssl_preread_server_name $tunnel_upstream { rss.rubenhensen.nl ${homeIP}:443; authentik.rubenhensen.nl ${homeIP}:443; + vault.rubenhensen.nl ${homeIP}:443; default 127.0.0.1:8443; } @@ -89,6 +90,16 @@ in }; }; + virtualHosts."vault.rubenhensen.nl" = { + listen = [ + { addr = "0.0.0.0"; port = 80; } + { addr = "[::]"; port = 80; } + ]; + locations."/" = { + proxyPass = "http://${homeIP}"; + }; + }; + virtualHosts."mail.rubenhensen.nl" = { listen = [ { addr = "0.0.0.0"; port = 80; }