William
ad9d565a8f
Replace wildcard DNS with dynamic service-based routing that reads from shared/services.nix. Public services (forgejo, vaultwarden, nextcloud) point to trantor's public IP for external access, while private services (kanidm, jellyfin) point to tailscale IPs for internal-only access. This provides granular control over service exposure without manual DNS management. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
50 lines
1.2 KiB
Nix
50 lines
1.2 KiB
Nix
# Shared service definitions for cross-host configuration
|
|
# Used by:
|
|
# - alexandria: DNS server (LAN) + service hosting (vaultwarden, nextcloud, jellyfin, kanidm)
|
|
# - trantor: DNS server (Tailnet) + service hosting (forgejo)
|
|
{
|
|
services = [
|
|
{
|
|
name = "kanidm";
|
|
domain = "auth.baduhai.dev";
|
|
host = "alexandria";
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 8443;
|
|
}
|
|
{
|
|
name = "vaultwarden";
|
|
domain = "pass.baduhai.dev";
|
|
host = "alexandria";
|
|
public = true;
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 8222;
|
|
}
|
|
{
|
|
name = "forgejo";
|
|
domain = "git.baduhai.dev";
|
|
host = "trantor";
|
|
public = true;
|
|
tailscaleIP = "100.108.5.90";
|
|
port = 3000;
|
|
}
|
|
{
|
|
name = "nextcloud";
|
|
domain = "cloud.baduhai.dev";
|
|
host = "alexandria";
|
|
public = true;
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 443;
|
|
}
|
|
{
|
|
name = "jellyfin";
|
|
domain = "jellyfin.baduhai.dev";
|
|
host = "alexandria";
|
|
lanIP = "192.168.15.142";
|
|
tailscaleIP = "100.76.19.50";
|
|
port = 8096;
|
|
}
|
|
];
|
|
}
|