From b53b558532e63c3d82d443ba9a7efadea6943dfa Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Thu, 8 May 2025 09:53:15 +0200
Subject: [PATCH] feat(baldur): setup crafty-controller completelly.

---
 modules/servers/baldur/crafty-controller.nix | 22 ++++++++++++++++++++
 modules/servers/general/traefik.nix          |  1 +
 2 files changed, 23 insertions(+)

diff --git a/modules/servers/baldur/crafty-controller.nix b/modules/servers/baldur/crafty-controller.nix
index a53ecd3..763cdf9 100644
--- a/modules/servers/baldur/crafty-controller.nix
+++ b/modules/servers/baldur/crafty-controller.nix
@@ -16,4 +16,26 @@
       "/var/lib/crafty-controller/import:/crafty/import"
     ];
   };
+
+  networking.firewall = {
+    allowedTCPPorts = [25500];
+    allowedUDPPorts = [25500];
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.crafty.loadBalancer.servers = [
+      {
+        url = "https://localhost:8443";
+      }
+    ];
+
+    routers.crafty = {
+      rule = "Host(`crafty.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "crafty";
+      entrypoints = "websecure";
+    };
+  };
 }
diff --git a/modules/servers/general/traefik.nix b/modules/servers/general/traefik.nix
index 4d7bc88..e411f5e 100644
--- a/modules/servers/general/traefik.nix
+++ b/modules/servers/general/traefik.nix
@@ -2,6 +2,7 @@
   services.traefik = {
     enable = true;
     staticConfigOptions = {
+      serversTransport.insecureSkipVerify = true;
       log = {level = "DEBUG";};
       certificatesResolvers = {
         porkbun = {