From 4a0f986c626293cd6c75306db6637f42c5dcd753 Mon Sep 17 00:00:00 2001
From: Yan Lin <github@yanlincs.com>
Date: Wed, 26 Nov 2025 13:50:59 +0100
Subject: [PATCH] fix traefik credential path

---
 hosts/nixos/hs/proxy.nix | 21 +--------------------
 modules/traefik.nix      |  6 +++---
 2 files changed, 4 insertions(+), 23 deletions(-)

diff --git a/hosts/nixos/hs/proxy.nix b/hosts/nixos/hs/proxy.nix
index da6b2f9..846616b 100644
--- a/hosts/nixos/hs/proxy.nix
+++ b/hosts/nixos/hs/proxy.nix
@@ -16,32 +16,13 @@
           };
         };
 
-        files = {
-          rule = "Host(`files.${config.networking.hostName}.yanlincs.com`)";
-          service = "files";
-          tls = {
-            certResolver = "cloudflare";
-            domains = [{
-              main = "*.${config.networking.hostName}.yanlincs.com";
-            }];
-          };
-        };
-
       };
 
       services = {
         syncthing = {
           loadBalancer = {
             servers = [{
-              url = "http://localhost:8384";
-            }];
-          };
-        };
-
-        files = {
-          loadBalancer = {
-            servers = [{
-              url = "http://localhost:5099";
+              url = "http://127.0.0.1:8384";
             }];
           };
         };
diff --git a/modules/traefik.nix b/modules/traefik.nix
index c84e411..dd66371 100644
--- a/modules/traefik.nix
+++ b/modules/traefik.nix
@@ -67,7 +67,7 @@
     # and will be merged with this base configuration
 
     # Environment variables for Cloudflare
-    environmentFiles = [ "/run/secrets/traefik-env" ];
+    environmentFiles = [ "/etc/traefik-env" ];
   };
 
   # Ensure Traefik can access Docker socket
@@ -77,9 +77,9 @@
     BindPaths = [ "/run/podman/podman.sock:/var/run/docker.sock" ];
   };
 
-  # NOTE: Cloudflare credentials must be manually created in /run/secrets/traefik-env
+  # NOTE: Cloudflare credentials must be manually created in /etc/traefik-env
   # The file should contain:
   #   CF_API_EMAIL=your-email@example.com
   #   CF_DNS_API_TOKEN=your-cloudflare-api-token
-  # Make sure to set permissions: chmod 600 /run/secrets/traefik-env
+  # Make sure to set permissions: chmod 600 /etc/traefik-env
 }