move caddy to server

devices/pi/configuration.nix

@@ -44,11 +44,9 @@ in {
     firewall.allowedTCPPorts = [80 443];
   };
 
-  services.caddy = {
+  services.pihole-ftl = {
     enable = true;
-    virtualHosts."mealie.polensky.me".extraConfig = ''
-      reverse_proxy http://192.168.1.242:9000
-    '';
+    openFirewallDHCP = true;
   };
 
   services.prometheus.exporters = {
@@ -73,7 +71,7 @@ in {
     users."${user}" = {
       isNormalUser = true;
       #hashedPasswordFile = config.sops.secrets.pi_user_pass.path;
-      extraGroups = ["wheel" "docker"];
+      extraGroups = ["wheel" "pihole"];
     };
   };
 

devices/server/configuration.nix

@@ -21,6 +21,13 @@ in {
 
   services.openssh.enable = true;
 
+  services.caddy = {
+    enable = true;
+    virtualHosts."mealie.polensky.me".extraConfig = ''
+      reverse_proxy http://127.0.0.1:9000
+    '';
+  };
+
   # observability
   services = {
     grafana = {
@@ -41,12 +48,12 @@ in {
         {
           job_name = "node-exporters-lan";
           static_configs = [
-            {
-              targets = ["192.168.1.241:9100"];
-              labels = {
-                instance = "pi";
-              };
-            }
+            #{
+            #  targets = ["192.168.1.241:9100"];
+            #  labels = {
+            #    instance = "pi";
+            #  };
+            #}
             {
               targets = ["127.0.0.1:9100"];
               labels = {
@@ -94,6 +101,8 @@ in {
   networking = {
     hostName = "server";
     firewall.allowedTCPPorts = [
+      80
+      443
       9090 # prometheus
       3000 # grafana
       8096 # jellyfin