cloudflare stuff

2025-07-16 05:51:30 +02:00
parent c8dd705c6f
commit a15a2c89bc
3 changed files with 7 additions and 0 deletions
--- a/modules/server/caddy/default.nix
+++ b/modules/server/caddy/default.nix
@@ -12,6 +12,11 @@ in {
    server.caddy.enable = mkEnableOption "Enables caddy";
  };
  config = mkIf cfg.enable {
+    age.secrets.cloudflare-env = {
+      file = "${self}/secrets/cloudflare-env.age";
+      owner = "caddy";
+      mode = "400";
+    };
    networking.firewall = let
      ports = [80 443];
    in {
@@ -21,6 +26,7 @@ in {

    services.caddy = {
      enable = true;
+      environmentFile = config.age.secrets.cloudflare-env.path;
      # package = self.packages.${pkgs.system}.caddy-with-plugins;
    };
  };