tls to internal

modules/homelab/audiobookshelf/default.nix

@@ -83,7 +83,7 @@ in
     services.caddy.virtualHosts."${cfg.url}" = {
       serverAliases = [ "abs.${homelab.public_domain}" ];
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port} {
         }
       '';

modules/homelab/gitea/default.nix

@@ -121,7 +121,7 @@ in
     };
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy localhost:${toString cfg.port} {
         }
       '';

modules/homelab/glance/default.nix

@@ -315,7 +315,7 @@ in
     services.caddy.virtualHosts."${cfg.url}" = {
       #      serverAliases = [ "${homelab.public_domain}" ];
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/home/homeassistant/default.nix

@@ -95,7 +95,7 @@ in
     services.caddy.virtualHosts."${cfg.url}" = {
       serverAliases = [ "${service}.${homelab.public_domain}" ];
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/home/zigbee2mqtt/default.nix

@@ -102,7 +102,7 @@ in
     services.caddy.virtualHosts."${cfg.url}" = {
       serverAliases = [ "z2m.${homelab.public_domain}" ];
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/immich/default.nix

@@ -91,7 +91,7 @@ in {
     services.caddy.virtualHosts."${cfg.url}" = {
       serverAliases = ["photos.${homelab.public_domain}"];
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/jellyfin/default.nix

@@ -77,9 +77,11 @@ in
 
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
+    #services.caddy.virtualHosts."${cfg.url}" = {
       serverAliases = [ "media.${homelab.public_domain}" ];
+      #tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/uptime-kuma/default.nix

@@ -79,7 +79,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/vaultwarden/default.nix

@@ -93,7 +93,7 @@ in
     services.caddy.virtualHosts."${cfg.url}" = {
       serverAliases = [ "pass.${homelab.public_domain}" ];
       extraConfig = ''
-        tls /etc/ssl/blakedheld.xyz.crt /etc/ssl/blakedheld.xyz.key
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };

modules/homelab/yacreader/default.nix

@@ -86,7 +86,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port} {
         }
       '';