1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00

feat: add customizable caddy package (with plugin support)

This commit is contained in:
oddlama 2023-06-05 01:14:46 +02:00
parent c5a863ce51
commit 6f84594c87
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
9 changed files with 90 additions and 26 deletions

21
hosts/sentinel/acme.nix Normal file
View file

@ -0,0 +1,21 @@
{config, ...}: let
inherit (config.repo.secrets.local) acme;
in {
rekey.secrets.acme-credentials = {
file = ./secrets/acme-credentials.age;
mode = "440";
group = "acme";
};
security.acme = {
acceptTerms = true;
defaults = {
inherit (acme) email;
credentialsFile = config.rekey.secrets.acme-credentials.path;
dnsProvider = "cloudflare";
dnsPropagationCheck = true;
reloadServices = ["nginx"];
};
};
extra.acme.wildcardDomains = acme.domains;
}