blake/nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

setup caddy for ssl via dns with cloudflare

Browse Source
This commit is contained in:
blake
2026-07-28 09:38:58 -05:00
parent 67527c2ef9
commit e5b8d6eb94
1 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/homelab/network/caddy/default.nix
+2 -5
View File
@@ -80,11 +80,6 @@ in {
}; };
}; };
# make cloudflare token readable
systemd.services.caddy.serviceConfig = {
EnvironmentFile = sec."cloudflare/api_token_caddy".path;
};
# enable acme for auto ssl certs with lets encrypt # enable acme for auto ssl certs with lets encrypt
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
@@ -94,6 +89,8 @@ in {
# override umask to make permissions work out # override umask to make permissions work out
systemd.services.${service}.serviceConfig = { systemd.services.${service}.serviceConfig = {
UMask = lib.mkForce "0007"; UMask = lib.mkForce "0007";
# make cloudflare token readable
EnvironmentFile = sec."cloudflare/api_token_caddy".path;
}; };
# open firewall # open firewall