setup caddy for ssl via dns with cloudflare

2026-07-28 09:38:58 -05:00
parent 67527c2ef9
commit e5b8d6eb94
1 changed files with 2 additions and 5 deletions
@@ -80,11 +80,6 @@ in {
      };
    };

-    # make cloudflare token readable
-    systemd.services.caddy.serviceConfig = {
-      EnvironmentFile = sec."cloudflare/api_token_caddy".path;
-    };
-
    # enable acme for auto ssl certs with lets encrypt
    security.acme = {
      acceptTerms = true;
@@ -94,6 +89,8 @@ in {
    # override umask to make permissions work out
    systemd.services.${service}.serviceConfig = {
      UMask = lib.mkForce "0007";
+      # make cloudflare token readable
+      EnvironmentFile = sec."cloudflare/api_token_caddy".path;
    };

    # open firewall