mandlm/home-manager
Watch
1
0
Fork
You've already forked home-manager
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(proxy): add wildcard hosts and front the fusion portal tunnel #1

Merged
mandlm merged 1 commit from feat/fusion-portal-proxy into main 2026-10-21 11:31:26 +00:00
Conversation 0 Commits 1 Files changed 2 +21 -2
mandlm commented 2026-10-21 11:29:48 +00:00
Owner
Copy link

Summary

  • New wildcard option for services.localProxy.hosts: serves *.<name>.localhost for upstreams that route by subdomain themselves. reverse_proxy passes Host through unchanged.
  • Declare the fusion host (port 8080, TLS, wildcard) next to vpn-portal-tunnel in horsch/ssh.nix, so the Fusion portal is reachable at https://portal.fusion.localhost and https://fusion-NNNN.fusion.localhost without :8080. Plain HTTP on port 80 keeps working.

Needs the vpn-labels Origin fix (open_vpn_server_horsch_connect#4) for tag edits over HTTPS; that is already deployed as v0.10.5.

Verification

  • nh home build . and nh home switch . pass on NB11313, Caddy reloaded.
  • https://portal.fusion.localhost/api/status returns 200 with a trusted cert (*.fusion.localhost from the existing Caddy CA); localhost.fusion.localhost gives 404, fusion-9999 gives 502.
  • Tag edit and the /swupdate/ live view work in Firefox over HTTPS.

🤖 Generated with Claude Code

## Summary - New `wildcard` option for `services.localProxy.hosts`: serves `*.<name>.localhost` for upstreams that route by subdomain themselves. `reverse_proxy` passes `Host` through unchanged. - Declare the `fusion` host (port 8080, TLS, wildcard) next to `vpn-portal-tunnel` in `horsch/ssh.nix`, so the Fusion portal is reachable at `https://portal.fusion.localhost` and `https://fusion-NNNN.fusion.localhost` without `:8080`. Plain HTTP on port 80 keeps working. Needs the vpn-labels Origin fix (open_vpn_server_horsch_connect#4) for tag edits over HTTPS; that is already deployed as v0.10.5. ## Verification - `nh home build .` and `nh home switch .` pass on NB11313, Caddy reloaded. - `https://portal.fusion.localhost/api/status` returns 200 with a trusted cert (`*.fusion.localhost` from the existing Caddy CA); `localhost.fusion.localhost` gives 404, `fusion-9999` gives 502. - Tag edit and the `/swupdate/` live view work in Firefox over HTTPS. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Add a wildcard option to services.localProxy.hosts that serves
*.<name>.localhost for upstreams routing by subdomain. Use it for the
vpn-portal-tunnel so the portal is reachable at
https://portal.fusion.localhost without the :8080 port.
mandlm merged commit 7a766b05c0 into main 2026-10-21 11:31:26 +00:00
mandlm deleted branch feat/fusion-portal-proxy 2026-10-21 11:31:27 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mandlm/home-manager!1
No description provided.