Commit 0e049bbff776

Vincent Demeester <vincent@sbr.pm>
2025-12-01 16:14:14
refactor: Route sakhalin and demeter services through Traefik
- Centralize n8n, paperless, grafana, kiwix, and mqtt through rhea - Enable unified SSL termination and routing for all services - Optimize MQTT backend to use local IPs instead of VPN tunnel Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 0efcaaf
Changed files (2)
systems
rhea
extra.nix
globals.nix
systems/rhea/extra.nix
@@ -224,7 +224,7 @@
               mqtt = {
                 loadBalancer = {
                   servers = [
-                    { address = "${builtins.head globals.machines.demeter.net.vpn.ips}:1883"; }
+                    { address = "${builtins.head globals.machines.demeter.net.ips}:1883"; }
                   ];
                 };
               };
globals.nix
@@ -574,12 +574,12 @@ _: {
       host = "rhea";
       aliases = [ "s" ];
     };
-    # MQTT on demeter
-    mqtt.host = "demeter";
-    # Services on sakhalin
-    kiwix.host = "sakhalin";
-    n8n.host = "sakhalin";
-    paperless.host = "sakhalin";
-    grafana.host = "sakhalin";
+    # MQTT on demeter (routed through rhea/traefik)
+    mqtt.host = "rhea";
+    # Services on sakhalin (routed through rhea/traefik)
+    kiwix.host = "rhea";
+    n8n.host = "rhea";
+    paperless.host = "rhea";
+    grafana.host = "rhea";
   };
 }