NixOS Caddy VM

Note

You can find more specifications on my blog

The specifications for the NixOS virtual machine running the Caddy reverse proxy used for all of my homelab's services.

NixOS

The NixOS configuration contains all of the configured domains and SOPS secrets. The domains can be found under the Caddyfile:

{
  layer4 {
    :22222 {
      route {
        proxy 192.168.10.3:22222
      }
    }
  }
}

# Route traffic for the Komodo instance
komodo.{$BASE_DOMAIN} {
	tls {
		dns cloudflare {
			api_token {env.CF_API_TOKEN}
		}
	}

	reverse_proxy 192.168.10.2:9120
}

# other domains...

The TLS certificates are managed using Cloudflare. Caddy manages traffic on port 80/443, but it also handles ingress SSH communications on 22222, redirecting them to the Forgejo VM, so that git operations can run using SSH.