Julia Lange
1e89810074
Changed to using Porkbun DNS Challenges for Caddy. This enables wildcard certificates. Documentation - https://caddyserver.com/docs/caddyfile/patterns#wildcard-certificates - https://caddyserver.com/docs/automatic-https#dns-challenge Changed headscale to use a domain I own instead of the beautiful madoka OP.
32 lines
903 B
Nix
32 lines
903 B
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
options.caddy = {
|
|
enable = lib.mkEnableOption "Enables caddy webserver";
|
|
vhosts = lib.mkOption {};
|
|
adminEmail = lib.mkOption { type = lib.types.str; };
|
|
environmentFile = lib.mkOption {};
|
|
};
|
|
|
|
config = lib.mkIf config.caddy.enable {
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
services.caddy = {
|
|
enable = true;
|
|
globalConfig = ''
|
|
acme_dns porkbun {
|
|
api_key {$APIKEY}
|
|
api_secret_key {$APISECRETKEY}
|
|
}
|
|
'';
|
|
package = pkgs.caddy.withPlugins {
|
|
plugins = [ "github.com/caddy-dns/porkbun@v0.3.1" ];
|
|
hash = "sha256-PUHu+KPywdJMuPLHPtQhUaw3Cv1pED5XQ1MOzlT/6h4=";
|
|
};
|
|
virtualHosts = config.caddy.vhosts;
|
|
email = config.caddy.adminEmail;
|
|
};
|
|
systemd.services.caddy.serviceConfig.EnvironmentFile = [
|
|
config.caddy.environmentFile
|
|
];
|
|
};
|
|
}
|