add cloudflared

hosts/pochita/configuration.nix

@@ -20,8 +20,9 @@
     blockYoutube = false;
     blockTwitter = false;
     enableForgejo = true;
-    enableCaddy = true;
+    # enableCaddy = true;
     # enableCloudflareDyndns = true;
+    enableCloudflared = true;
   };
 
   i18n.inputMethod.enable = lib.mkForce false; # no need for japanese input method

modules/services/cloudflared.nix

@@ -0,0 +1,30 @@
+{
+  config,
+  lib,
+  ...
+}: {
+  options = {
+    myModules.enableCloudflared = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "Enable Cloudflare tunnels";
+    };
+  };
+
+  config = lib.mkMerge [
+    (lib.mkIf config.myModules.enableCloudflared {
+      services.cloudflared = {
+        enable = true;
+        credentialsFile = "/home/osbm/.cloudflared/cert.pem";
+        tunnels."ffe51e83-5516-44e5-9c8b-2b140cdfece9" = {
+          default = "http_status:404";
+          ingress = {
+            "git.osbm.dev" = {
+              service = "http://localhost:3000";
+            };
+          };
+        };
+      };
+    })
+  ];
+}

modules/services/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./caddy.nix
     ./cloudflare-dyndns.nix
+    ./cloudflared.nix
     ./ollama.nix
     ./forgejo.nix
     ./jellyfin.nix