59 lines
1.3 KiB
Nix
59 lines
1.3 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
config = lib.mkMerge [
|
|
(lib.mkIf config.osbmModules.services.caddy.enable {
|
|
services.caddy = {
|
|
enable = true;
|
|
# package = pkgs.caddy.withPlugins {
|
|
# # update time to time
|
|
# # last update: 2025-03-02
|
|
# plugins = [ "github.com/caddy-dns/cloudflare@v0.2.1" ];
|
|
# hash = "sha256-2D7dnG50CwtCho+U+iHmSj2w14zllQXPjmTHr6lJZ/A=";
|
|
# };
|
|
# email = "osbm@osbm.dev";
|
|
# extraConfig = ''
|
|
# (cloudflare) {
|
|
# tls {
|
|
# dns cloudflare {env.CF_API_TOKEN}
|
|
# }
|
|
# }
|
|
# '';
|
|
# globalConfig = ''
|
|
# acme_dns cloudflare {env.CF_API_TOKEN}
|
|
# '';
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
3000
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
nssTools
|
|
];
|
|
age.secrets.cloudflare = {
|
|
file = ../../secrets/cloudflare.age;
|
|
path = "/etc/caddy/.env";
|
|
owner = "caddy";
|
|
mode = "0600";
|
|
};
|
|
|
|
systemd.services.caddy.serviceConfig = {
|
|
EnvironmentFile = "/etc/caddy/.env";
|
|
};
|
|
|
|
security.acme.acceptTerms = true;
|
|
security.acme.defaults = {
|
|
email = "osbm@osbm.dev";
|
|
acceptTerms = true;
|
|
};
|
|
|
|
})
|
|
];
|
|
}
|