hosts/lkk-nix-1/default.nix

@@ -14,7 +14,7 @@
   services.openssh.passwordAuthentication = false;
   networking = {
     hostName = "lkk-nix-1";
-    firewall.enable = false;
+    firewall.enable = true;
     firewall.allowedTCPPortRanges = [{
       from = 3000;
       to = 3100;
@@ -30,8 +30,8 @@
     secrets = {
       mj-smtp-user.file = ../../secrets/mj-smtp-user.age;
       mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age;
-      
+
-      billbee-api-key.file = ../../secrets/billbee-api-key.age;
+      billbee-api-key.file = ../secrets/billbee-api-key.age;
     };
     identityPaths = [ "/home/m3tam3re/.ssh/lkk-nix-1" ];
   };

hosts/lkk-nix-1/services/containers/baserow.nix

@@ -15,7 +15,12 @@
   };
   services.caddy.extraConfig = ''
             db.lanakk.com {
-                          reverse_proxy localhost:3001
+                          reverse_proxy localhost:3001 {
+                                        header_up Host {host}
+                                        header_up X-Real-IP {remote_host}
+                                        header_up X-Forwarded-For {remote_host}
+                                        header_up X-Forwarded-Proto {scheme}
+                          }
             }
 '';
   

hosts/lkk-nix-1/services/n8n.nix

@@ -1,5 +1,5 @@
-{ config, ... }: {
+{
-
+  
   services.n8n = {
     enable = true;
     openFirewall = true;
@@ -9,12 +9,12 @@
     };
   };
   systemd.services.n8n.environment = {
-    BILLBEE_API_KEY = config.age.secrets.billbee-api-key.path;
+    BILLBEE_API_KEY = config.age.secrets.bilbee-api-key.path;;
   };
   services.caddy.extraConfig = ''
-    wf.lanakk.com {
+            wf.lanakk.com {
-                  reverse_proxy localhost:5678
+                          reverse_proxy localhost:5678
-    }
+            }
-  '';
+'';
 
 }

secrets/billbee-api-key.age

@@ -1,16 +1,15 @@
 age-encryption.org/v1
 -> ssh-rsa DQlE7w
-OtpKyKFBd86zVAvGIZuBYZuKO3y79nq9Ak6h08j8f8xPSwXtEtcAJBfgBXQCYdV2
+hsfO6BW9zwZ2Uii6c/Dl5o7z4rrYoMw0nQlWCx+2breLo2ye4RQD677onmQ2e0Ke
-Z+pY7rMpKx/0rx+nG4/Axl2WwuCIhYrB4ypNxYOAdtrgBGdGQueQfZAcq5aV1aRt
+82jseYfcziCl7VtRh5UrDjij3SEdGaYGj8dPQWhYo5/MamZkYM/YVSLhrnKryVeN
-KZF1dlcxy3P8CYpodmLZQW+djjGtoDQDIjlNpf/1WPjKEF86Dd+3ihnnGFzIHib5
+Rg8PDIytDbS5ZXy9SiVt9ZqCg/UqCs/Kz00cYIT8DiKt7Xx+PfyA7Vrl7DXKKYPa
-9hxIc7iwIEVp6atEoqd9I/Cp/kpwUksAhuX906l0vIvCz1YyuW0oWugGa4uN1ruK
+o1xZF67AYVb575jnZO4UxmbFpSJBa+KF9/U/ZMQS0ldaHX5mSID86llvbvJV0zTY
-cfCcv4iWqZb/dJg0m/tUH6xXC/njjFs4xh3kauomtYf+PkJ66BK0BfAJenIGwHsm
+aHTyNPCYSUMrI/rbO3au4hOy3YLenfeKDgv4TkK7fxt7EsCFM4vbDuLcycA71/W/
-/t5sI9TzumMm3lfJMjjxqRUfI9Etp9VSe5OcAbeNZkAk84JmU1vddyQ9cQKmJ4il
+KoRS3LgdcLHonUbnOu9fx37yAteYF2MI4Qk5EfqEMi4NO+BVhro4zs5rQXthdtAb
-TUtdRHAYqh1HKdihY0Kf3p/Cua7zNu0PRDRF52zUP06wZ9LLMBokeD6lOVsh5sWb
+d5XBEL1+RlY38a7wL0Z/YqRb7oWo++TcMcsuvZjxRAU+TyZN0Vp5yDPhICS8sife
-PcpRQgZxEbgbkSi7XEncSHUWuyhtfRMie3jaFfaNb/Eq1J+U1puHaahG2RboubNl
+Q4EXpNEcJKS2312xpZ0dXw71O8oXo+my0ExvBHJj7NF4Xdq/FKoUguJC36Yse3CZ
 
--> *#,oB|-grease q:S"z3 $yJt<Ihx dX S^C[i
+-> XXd~>vui-grease A,Rdm +{~m? HWTg'I9 oeNG
-QwYCVTkVaOPWgAdaB4lT+On0G5iSIth64mvqOukhpd1pfJEqbErK2shdLAgeGqnV
+lj0k8zN4AnwtVkHbRlLVkOg
-LcGBGnBHTeZxkLK0dUojZU4EowyATgg7Xza/bog
+--- LjepOuTYZK+lgRjTbmLgyIBHDCFEYzxMSvAA15/Rw08
---- SY/yTo1kwFsPe35ej/YJa2D+OADxOlzE5zSO7MD/ges
+ ÊÃM›Œû™~Г7WGÀ,®ß£Üm®Å·	rÂ}䋤=ýHɨ°/™ÄUðBFÒup,R<E‚\mØÈŽY ê
-ÝÝ/u$›g,çĆy¶YŞ­~ҢöĹ9ě÷ŇÇ|]5<>%Ľž
Ô<>˛¸V›KşmGš”.kňQ¬wŮŞŐp_Çů“P