From c99823a198db8f8629a160f8dcf7bf87f3b1fbd4 Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Sat, 21 Mar 2026 15:03:01 +0100
Subject: [PATCH] Reverse proxy Wings (of Pelican)

---
 nix-system-configs/modules/system/traefik.nix | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/nix-system-configs/modules/system/traefik.nix b/nix-system-configs/modules/system/traefik.nix
index 71af223..f635ae0 100644
--- a/nix-system-configs/modules/system/traefik.nix
+++ b/nix-system-configs/modules/system/traefik.nix
@@ -7,7 +7,7 @@
   choose = paths: builtins.head (builtins.filter (p: builtins.pathExists p) paths);
   # Domain and Cloudflare DDNS records configured here. Update this list to add/remove records.
   domain = "prg-radio.org";
-  records = ["git" "grafana" "anubis" "wavelog" "pelican" "partdb" "mail" "mailadmin" "@" "test" "minecraft"];
+  records = ["git" "grafana" "anubis" "wavelog" "pelican" "partdb" "mail" "mailadmin" "@" "test" "minecraft" "wings1.pelican"];
   recordsStr = lib.concatStringsSep " " records;
   zoneId = "9fde8d0fa53502f2d1b7e0b1d3765d49";
   envFile = "/home/traefikprg/cloudflare/cloudflare.env";
@@ -366,6 +366,14 @@ in {
             tls = {certresolver = "acme";};
           };
 
+          # Wings panel - exposes the Wings
+          wings = {
+            rule = "Host(`wings1.pelican.prg-radio.org`)";
+            service = "wings-pelican";
+            entryPoints = ["websecure"];
+            tls = {certresolver = "acme";};
+          };
+
           # Matrix HTTP router for client requests (Element etc.)
           matrix = {
             rule = "Host(`lgbtq.prg-radio.org`)";
@@ -464,7 +472,7 @@ in {
             ];
           };
 
-          # Pelican panel backend - the wavelog host exposes the container on host port 8070
+          # Pelican panel backend
           pelican.loadBalancer = {
             servers = [
               {url = "http://10.1.1.249:8070";}
@@ -472,6 +480,13 @@ in {
             passHostHeader = true;
           };
 
+          wings-pelican.loadBalancer = {
+            servers = [
+              {url = "http://10.1.1.249:8443";}
+            ];
+            passHostHeader = true;
+          };
+
           # Mail JMAP HTTP backend
           mail-jmap.loadBalancer = {
             servers = [{url = "http://10.1.1.15:8080";}];