simplify caddy vhosts

hosts/flora-6/apps/caddy.nix

@@ -9,51 +9,36 @@
     "d '/data/srv/www/os/download/' 0750 hakkonaut hakkonaut - -"
   ];
 
-  services.caddy = {
+  services.caddy =
-    enable = lib.mkForce true;
+    let
-    group = "hakkonaut";
+      mkRevProxyVhost = addr: {
-    email = "admins@pub.solar";
+        logFormat = lib.mkForce "output discard";
-    enableReload = true;
+        extraConfig = "reverse_proxy ${addr}";
-    globalConfig = lib.mkForce ''
-      grace_period 60s
-    '';
-    virtualHosts = {
-      "ci.pub.solar" = {
-        logFormat = lib.mkForce ''
-          output discard
-        '';
-        extraConfig = ''
-          reverse_proxy :4000
-        '';
       };
-      "flora-6.pub.solar" = {
+    in
-        logFormat = lib.mkForce ''
+    {
-          output discard
+      enable = lib.mkForce true;
-        '';
+      group = "hakkonaut";
-        extraConfig = ''
+      email = "admins@pub.solar";
-                    basicauth * {
+      enableReload = true;
-          	    hakkonaut $2a$14$mmIAy/Ezm6YGohUtXa2mWeW6Bcw1MQXPhrRbz14jAD2iUu3oob/t.
+      globalConfig = lib.mkForce "grace_period 60s";
-                    }
+
-                    reverse_proxy :${toString config.services.loki.configuration.server.http_listen_port}
+      virtualHosts = {
-        '';
+        "ci.pub.solar" = mkRevProxyVhost ":4000";
-      };
+        "alerts.pub.solar" = mkRevProxyVhost "10.7.6.2:${toString config.services.prometheus.alertmanager.port}";
-      "grafana.pub.solar" = {
+        "grafana.pub.solar" = mkRevProxyVhost ":${toString config.services.grafana.settings.server.http_port}";
-        logFormat = lib.mkForce ''
+        "obs-portal.pub.solar" = mkRevProxyVhost "obs-portal.svc.e5756d08-36fd-424b-f8bc-acdb92ca7b82.lev-1.int.greenbaum.zone:3000";
-          output discard
+        "flora-6.pub.solar" = {
-        '';
+          logFormat = lib.mkForce "output discard";
-        extraConfig = ''
+          extraConfig = ''
-          reverse_proxy :${toString config.services.grafana.settings.server.http_port}
+            basicauth * {
-        '';
+              hakkonaut $2a$14$mmIAy/Ezm6YGohUtXa2mWeW6Bcw1MQXPhrRbz14jAD2iUu3oob/t.
-      };
+            }
-      "obs-portal.pub.solar" = {
+            reverse_proxy :${toString config.services.loki.configuration.server.http_listen_port}
-        logFormat = lib.mkForce ''
+          '';
-          output discard
+        };
-        '';
-        extraConfig = ''
-          reverse_proxy obs-portal.svc.e5756d08-36fd-424b-f8bc-acdb92ca7b82.lev-1.int.greenbaum.zone:3000
-        '';
       };
     };
-  };
+
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 }