diff options
| author | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2025-12-25 11:49:29 -0600 |
|---|---|---|
| committer | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2025-12-25 11:49:29 -0600 |
| commit | 6f9b285bdb935fbab99978307034c7458ddc9d09 (patch) | |
| tree | eabc76d2194de6959ab5d77e13dbc44cbaac26e7 /modules/services/nixos/selfhost/caddy.nix | |
| parent | 87763bcc7d13e92b96c5743507795fba4444eabe (diff) | |
asdf
Diffstat (limited to 'modules/services/nixos/selfhost/caddy.nix')
| -rw-r--r-- | modules/services/nixos/selfhost/caddy.nix | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/modules/services/nixos/selfhost/caddy.nix b/modules/services/nixos/selfhost/caddy.nix new file mode 100644 index 0000000..903407f --- /dev/null +++ b/modules/services/nixos/selfhost/caddy.nix @@ -0,0 +1,26 @@ +{ + pkgs, + lib, + config, + ... +}: let + cfg = config.collinux.services.selfhost.caddy; +in + lib.mkIf cfg.enable (lib.mkMerge [ + { + services.caddy.enable = true; + networking.firewall.allowedTCPPorts = [80 443]; + environment.systemPackages = with pkgs; [nss]; # required for caddy https stuff + } + (lib.mkIf config.collinux.services.networking.tailscale.enable { + services.caddy = { + package = pkgs.caddy.withPlugins { + plugins = [ + "github.com/tailscale/caddy-tailscale@v0.0.0-20251204171825-f070d146dd61" + ]; + hash = "sha256-cK7C5ISsTwX0FMf891s/Vr22JvRqYEC8GkLfP1L1Mus="; + }; + environmentFile = config.age.secrets."caddy-tailscale-authkey".path; + }; + }) + ]) |