From 2d6cb810cc0f5cdbac53aa8731f0e15b0d25f125 Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Thu, 15 May 2025 02:47:47 -0400
Subject: [PATCH] [prefect.caddy] Add pocket-id and block adding mail config

---
 .../x86_64-linux/prefect/services/caddy.nix   | 80 +++++++++++--------
 1 file changed, 47 insertions(+), 33 deletions(-)

diff --git a/systems/x86_64-linux/prefect/services/caddy.nix b/systems/x86_64-linux/prefect/services/caddy.nix
index 919c5f02..f0251e56 100644
--- a/systems/x86_64-linux/prefect/services/caddy.nix
+++ b/systems/x86_64-linux/prefect/services/caddy.nix
@@ -63,7 +63,7 @@ in
         '';
       };
 
-      # Authentik
+      # Authentication
       ${pns.pocket-id.extUrl} = {
         extraConfig = ''
           reverse_proxy /api/* ${marvin}:${toString pns.pocket-id.be-port} {
@@ -235,6 +235,20 @@ in
         '';
       };
 
+      # Pingvin Share
+      ${pns.pingvin-share.extUrl} = {
+        extraConfig = ''
+          reverse_proxy /api/* ${marvin}:${toString pns.pingvin-share.be-anubis} {
+            header_up X-Real-IP {remote_host}
+            header_up X-Http-Version {http.request.proto}
+          }
+          reverse_proxy /* ${marvin}:${toString pns.pingvin-share.anubis} {
+            header_up X-Real-IP {remote_host}
+            header_up X-Http-Version {http.request.proto}
+          }
+        '';
+      };
+
       # Simple Tailscale Hosts
 
       # Deemix
@@ -253,45 +267,45 @@ in
           reverse_proxy ${marvin}:${toString pns.pinchflat.port}
         '';
       };
-      "mail.pyrox.dev:80" = {
-        extraConfig = ''
-          reverse_proxy ${marvin}:${mail.intHTTP}
-        '';
-      };
+      # "mail.pyrox.dev:80" = {
+      #   extraConfig = ''
+      #     reverse_proxy ${marvin}:${mail.intHTTP}
+      #   '';
+      # };
     };
     # Mail Config
     extraConfig = ''
-      filesystem blog-repo git ${marvin}:${pns.git.port}/pyrox/new-blog {
+      filesystem blog-repo git ${marvin}:${toString pns.git.port}/pyrox/new-blog {
         ref pages
         refresh_period 10m
       }
-      layer4 {
-        0.0.0.0:465 {
-          route {
-            proxy {
-              proxy_protocol v2
-              upstream ${marvinIP}:${mail.intSMTPS}
-            }
-          }
-        }
-        0.0.0.0:993 {
-          route {
-            proxy {
-              proxy_protocol v2
-              upstream ${marvinIP}:${mail.intIMAPS}
-            }
-          }
-        }
-        0.0.0.0:4190 {
-          route {
-            proxy {
-              proxy_protocol v2
-              upstream ${marvinIP}:${mail.intManageSieve}
-            }
-          }
-        }
-      }
     '';
+    # layer4 {
+    #   0.0.0.0:465 {
+    #     route {
+    #       proxy {
+    #         proxy_protocol v2
+    #         upstream ${marvinIP}:${mail.intSMTPS}
+    #       }
+    #     }
+    #   }
+    #   0.0.0.0:993 {
+    #     route {
+    #       proxy {
+    #         proxy_protocol v2
+    #         upstream ${marvinIP}:${mail.intIMAPS}
+    #       }
+    #     }
+    #   }
+    #   0.0.0.0:4190 {
+    #     route {
+    #       proxy {
+    #         proxy_protocol v2
+    #         upstream ${marvinIP}:${mail.intManageSieve}
+    #       }
+    #     }
+    #   }
+    # }
   };
   systemd.services.caddy.serviceConfig.CapabilityBoundingSet = "CAP_NET_BIND_SERVICE";
   systemd.services.caddy.serviceConfig.AmbientCapabilities = "CAP_NET_BIND_SERVICE";
-- 
2.54.0