ahhh

hosts/picard/default.nix

@@ -68,6 +68,7 @@
   systemd.services.caddy.serviceConfig.EnvironmentFile = config.age.secrets.desec.path;
   networking.firewall.allowedTCPPorts = [ 80 443 config.services.forgejo.settings.server.SSH_PORT 25 143 465 587 993 ];
   networking.firewall.allowedUDPPorts = [ 443 ];
+  services.prometheus.exporters.node = { enable = true; enabledCollectors = [ "systemd" ]; };
   services.caddy = {
     logFormat = "level INFO";
     enable = true;
@@ -76,9 +77,17 @@
       acme_dns desec {
         token "{$TOKEN}"
       }
+      admin :2019
+      metrics {
+        per_host
+      }
     '';
     virtualHosts."*.hailsatan.eu".extraConfig = ''
-      reverse_proxy https://j.hailsatan.eu
+      reverse_proxy https://ds9.kangaroo-galaxy.ts.net {
+        transport http {
+          tls_server_name {host}
+        }
+      }
     '';
     virtualHosts."l621.net".extraConfig = ''
       reverse_proxy http://127.0.0.1:8186

hosts/picard/xynospace-matrix.nix

@@ -77,6 +77,9 @@ in
         settings.database.args.database = "matrix-synapse-xynospace";
         settings.database.args.host = hostAddress;
         settings.database.args.password = "synapse";
+        settings.app_service_config_files = [
+          "/var/lib/signalbot.yaml"
+        ];
         settings.listeners = [
           {
             port = 8008;