rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-05-13 15:51:09 +02:00
Code Issues Projects Releases Packages Wiki Activity

caddy: enable dns challenges

Browse source
This commit is contained in:
Rouven Seifert 2025-05-11 16:49:43 +02:00
parent f8eee37e51
commit 0cf89b0ae4
10 changed files with 48 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

8
shared/caddy/default.nix
View file

@ -1,15 +1,21 @@
{ config, caddy-patched, ... }:
{
age.secrets.acme-caddy = {
file = ../../secrets/shared/acme-caddy.age;
owner = "caddy";
};
services.caddy = {
enable = true;
# package = caddy-patched.packages.x86_64-linux.default;
package = caddy-patched.packages.x86_64-linux.default;
email = "ca@${config.networking.domain}";
logFormat = "format console";
globalConfig = ''
servers {
metrics
}
import ${config.age.secrets.acme-caddy.path}
'';
virtualHosts.":2018" = {
extraConfig = ''
metrics

2
shared/systemd.nix
View file

@ -1,6 +1,8 @@
{ pkgs, lib, ... }:
{
# fixes run0 failing to execute
security.pam.services.systemd-run0 = { };
systemd = {
# package = lib.mkDefault (nixpkgs-systemd-256.legacyPackages.x86_64-linux.systemd.override { withHomed = false; });