cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

derp 4

Browse Source
This commit is contained in:
cnst
2025-07-17 17:11:23 +02:00
parent 8509050503
commit 151104d696
5 changed files with 17 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
modules/server/caddy/default.nix
View File

@@ -12,11 +12,6 @@ in {
server.caddy.enable = mkEnableOption "Enables caddy";
};
config = mkIf cfg.enable {
age.secrets.cloudflare-env = {
file = "${self}/secrets/cloudflare-env.age";
owner = "caddy";
mode = "400";
};
networking.firewall = let
ports = [80 443];
in {
@@ -24,20 +19,20 @@ in {
allowedUDPPorts = ports;
};
# security.acme = {
# acceptTerms = true;
# defaults.email = config.server.email;
# certs.${config.server.domain} = {
# reloadServices = ["caddy.service"];
# domain = "${config.server.domain}";
# extraDomainNames = ["*.${config.server.domain}"];
# dnsProvider = "cloudflare";
# dnsResolver = "1.1.1.1:53";
# dnsPropagationCheck = true;
# group = config.services.caddy.group;
# environmentFile = config.age.secrets.cloudflare-env.path;
# };
# };
security.acme = {
acceptTerms = true;
defaults.email = config.server.email;
certs.${config.server.domain} = {
reloadServices = ["caddy.service"];
domain = "${config.server.domain}";
extraDomainNames = ["*.${config.server.domain}"];
dnsProvider = "cloudflare";
dnsResolver = "1.1.1.1:53";
dnsPropagationCheck = true;
group = config.services.caddy.group;
environmentFile = config.age.secrets.cloudflareDnsApiToken.path;
};
};
services.caddy = {
enable = true;