From 7d7e2eec37debd2fcb01780434aff20115df3050 Mon Sep 17 00:00:00 2001 From: osbm Date: Tue, 4 Mar 2025 02:05:17 +0300 Subject: [PATCH] lets try this --- modules/caddy.nix | 13 +------------ 1 file changed, 1 insertion(+), 12 deletions(-) diff --git a/modules/caddy.nix b/modules/caddy.nix index dea8eda..407f891 100644 --- a/modules/caddy.nix +++ b/modules/caddy.nix @@ -35,18 +35,7 @@ ]; systemd.services.caddy.serviceConfig = { - LoadCredential = "CLOUDFLARE_API_TOKEN:${config.age.secrets.cloudflare.path}"; - EnvironmentFile = "-%t/caddy/secrets.env"; - RuntimeDirectory = "caddy"; - ExecStartPre = [ - ((pkgs.writeShellApplication { - name = "caddy-secrets"; - text = "echo \"CLOUDFLARE_API_TOKEN=\\\"$(<\"$CREDENTIALS_DIRECTORY/CLOUDFLARE_API_TOKEN\")\\\"\" > \"$RUNTIME_DIRECTORY/secrets.env\""; - }) - + "/bin/caddy-secrets") - ]; - AmbientCapabilities = "cap_net_bind_service"; - CapabilityBoundingSet = "cap_net_bind_service"; + EnvironmentFile = "/etc/caddy/.env"; }; }) ];