From 6f9b285bdb935fbab99978307034c7458ddc9d09 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Thu, 25 Dec 2025 11:49:29 -0600
Subject: asdf

---
 modules/services/nixos/selfhost/caddy.nix | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 modules/services/nixos/selfhost/caddy.nix

(limited to 'modules/services/nixos/selfhost/caddy.nix')

diff --git a/modules/services/nixos/selfhost/caddy.nix b/modules/services/nixos/selfhost/caddy.nix
new file mode 100644
index 0000000..903407f
--- /dev/null
+++ b/modules/services/nixos/selfhost/caddy.nix
@@ -0,0 +1,26 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}: let
+  cfg = config.collinux.services.selfhost.caddy;
+in
+  lib.mkIf cfg.enable (lib.mkMerge [
+    {
+      services.caddy.enable = true;
+      networking.firewall.allowedTCPPorts = [80 443];
+      environment.systemPackages = with pkgs; [nss]; # required for caddy https stuff
+    }
+    (lib.mkIf config.collinux.services.networking.tailscale.enable {
+      services.caddy = {
+        package = pkgs.caddy.withPlugins {
+          plugins = [
+            "github.com/tailscale/caddy-tailscale@v0.0.0-20251204171825-f070d146dd61"
+          ];
+          hash = "sha256-cK7C5ISsTwX0FMf891s/Vr22JvRqYEC8GkLfP1L1Mus=";
+        };
+        environmentFile = config.age.secrets."caddy-tailscale-authkey".path;
+      };
+    })
+  ])
-- 
cgit v1.3.1