fix middlewares name, remove httpd, add nextcloud

nixos/viridian/services/traefik/default.nix

@@ -6,7 +6,7 @@
   imports = [
     "${inputs.nixpkgs-unstable}/nixos/modules/services/web-servers/traefik.nix"
     ./routers.nix
-    ./middleware.nix
+    ./middlewares.nix
     ./services.nix
   ];
 

nixos/viridian/services/traefik/middlewares.nix

@@ -42,6 +42,24 @@
       # Even if an IP stays in the cache for a period of a month, it must be fetch again after a month.
       forceMonthlyUpdate = "true";
     };
+    # Secure headers for nextcloud
+    nextcloud-secure-headers = {
+      headers = {
+        hostsProxyHeaders = [ "X-Forwarded-Host" ];
+        referrerPolicy = "same-origin";
+      };
+    };
+    # Redirect HTTPS
+    https-redirect = {
+      redirectscheme.scheme = "https";
+    };
+    # Nextcloud chain
+    nextcloud-chain = {
+      chain.middlewares = [
+        "https-redirect"
+        "nextcloud-secure-headers"
+      ];
+    };
   };
 }
 

nixos/viridian/services/traefik/routers.nix

@@ -2,17 +2,6 @@
 
 { 
   services.traefik.dynamicConfigOptions.http.routers = {
-    httpd = {
-      rule = "Host(`sajenim.dev`)";
-      entryPoints = [
-        "websecure"
-      ];
-      middlewares = [
-        "geoblock"
-      ];
-      service = "httpd";
-    };
-
     microbin = {
       rule = "Host(`bin.kanto.dev`)";
       entryPoints = [
@@ -155,6 +144,18 @@
       ];
       service = "jellyseerr";
     };
+
+    nextcloud = {
+      rule = "Host(`nc.kanto.dev`)";
+      entryPoints = [
+        "websecure"
+      ];
+      middlewares = [
+        # "internal"
+        "nextcloud-chain"
+      ];
+      service = "nextcloud";
+    };
   };
 }
 

nixos/viridian/services/traefik/services.nix

@@ -2,9 +2,6 @@
 
 {
   services.traefik.dynamicConfigOptions.http.services = {
-    httpd.loadBalancer.servers = [
-      { url = "http://192.168.1.102:5624"; }
-    ];
     microbin.loadBalancer.servers = [
       { url = "http://192.168.1.102:8181"; }
     ];
@@ -41,6 +38,9 @@
     jellyseerr.loadBalancer.servers = [
       { url = "http://192.168.1.102:5055"; }
     ];
+    nextcloud.loadBalancer.servers = [
+      { url = "http://192.168.1.102:11000"; }
+    ];
   };
 }