littlelink-lanakk

hosts/lkk-nix-1/default.nix

@@ -61,6 +61,10 @@
         file = ../../secrets/briefkasten-env.age;
         mode = "770";
       };
+      littlelink-lanakk-env = {
+        file = ../../secrets/littlelink-lanakk-env.age;
+        mode = "770";
+      };
     };
     identityPaths = [ "/home/m3tam3re/.ssh/lkk-nix-1" ];
   };

hosts/lkk-nix-1/services/containers/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./baserow.nix
     ./briefkasten.nix
+    ./little-link.nix
     ./matomo.nix
     ./nextcloud.nix
     ./wordpress.nix

hosts/lkk-nix-1/services/containers/little-link.nix

@@ -0,0 +1,8 @@
+{ config, outputs, ... }: {
+  virtualisation.oci-containers.containers."littlelink_lanakk" = {
+    image = "ghcr.io/techno-tim/littlelink-server";
+    environmentFiles = [ config.littlelink-lanakk-env.path ];    
+    ports = [ "3010:3000" ];
+    extraOptions = [ "--ip=10.88.0.20" ];
+  };
+}

hosts/lkk-nix-1/services/traefik.nix

@@ -57,6 +57,8 @@
           adguard.loadBalancer.servers = [{ url = "http://localhost:3008/"; }];
           briefkasten.loadBalancer.servers =
             [{ url = "http://localhost:3009/"; }];
+          littlelink-lanakk.loadBalancer.servers =
+            [{ url = "http://localhost:3010/"; }];
         };
         routers = {
           api = {
@@ -165,6 +167,15 @@
             service = "briefkasten";
             entrypoints = "websecure";
           };
+          littlelink-lanakk = {
+            rule = "Host(`links.lanakk.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "links.lanakk.com";
+            };
+            service = "littlelink-lanakk";
+            entrypoints = "websecure";
+          };
         };
       };
     };

secrets.nix

@@ -14,4 +14,6 @@ in {
   "wg-easy-environmentFile.age".publicKeys = [ root ];
   
   "briefkasten-env.age".publicKeys = [ root ];
+
+  "littlelink-lanakk-env.age".publicKeys = [ root ];
 }