From 67527c2ef9a3cc50e491673750e27bf80e48c7b4 Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Tue, 28 Jul 2026 09:38:19 -0500
Subject: [PATCH] setup caddy for ssl via dns with cloudflare

---
 modules/homelab/network/caddy/default.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/modules/homelab/network/caddy/default.nix b/modules/homelab/network/caddy/default.nix
index d07cddb..dc9feab 100644
--- a/modules/homelab/network/caddy/default.nix
+++ b/modules/homelab/network/caddy/default.nix
@@ -67,11 +67,6 @@ in {
         acme_dns cloudflare {env.CLOUDFLARE_API_TOKEN}
       '';
 
-      # make cloudflare token readable
-      systemd.services.caddy.serviceConfig = {
-        EnvironmentFile = sec."cloudflare/api_token_caddy".path;
-      };
-
       # static page for hosting key files
       virtualHosts = {
         "keys.${homelab.base_domain}" = lib.mkIf cfg.keys {
@@ -85,6 +80,11 @@ in {
       };
     };
 
+    # make cloudflare token readable
+    systemd.services.caddy.serviceConfig = {
+      EnvironmentFile = sec."cloudflare/api_token_caddy".path;
+    };
+
     # enable acme for auto ssl certs with lets encrypt
     security.acme = {
       acceptTerms = true;