osbm/flake
1
0
Fork 0
Code Issues Pull requests Wiki Activity

lets try this

Browse source
This commit is contained in:
Osman Faruk Bayram 2025-03-04 02:05:17 +03:00
parent c9015f6879
commit 7d7e2eec37
1 changed files with 1 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/caddy.nix
View file

@ -35,18 +35,7 @@
];
systemd.services.caddy.serviceConfig = {
LoadCredential = "CLOUDFLARE_API_TOKEN:${config.age.secrets.cloudflare.path}";
EnvironmentFile = "-%t/caddy/secrets.env";
RuntimeDirectory = "caddy";
ExecStartPre = [
((pkgs.writeShellApplication {
name = "caddy-secrets";
text = "echo \"CLOUDFLARE_API_TOKEN=\\\"$(<\"$CREDENTIALS_DIRECTORY/CLOUDFLARE_API_TOKEN\")\\\"\" > \"$RUNTIME_DIRECTORY/secrets.env\"";
})
+ "/bin/caddy-secrets")
];
AmbientCapabilities = "cap_net_bind_service";
CapabilityBoundingSet = "cap_net_bind_service";
EnvironmentFile = "/etc/caddy/.env";
};
})
];