diff --git a/modules/nixos/services/caddy/caddy0/default.nix b/modules/nixos/services/caddy/caddy0/default.nix index 1426dd3..0379819 100755 --- a/modules/nixos/services/caddy/caddy0/default.nix +++ b/modules/nixos/services/caddy/caddy0/default.nix @@ -14,28 +14,22 @@ in virtualHosts = { "${opencloud.domains.url0}" = { extraConfig = '' - reverse_proxy ${eris.ip.address0}:${builtins.toString service.ports.port1} { - transport http { - tls - tls_insecure_skip_verify - } - } + reverse_proxy ${eris.ip.address0}:${builtins.toString service.ports.port0} + tls ${opencloud.ssl.cert} ${opencloud.ssl.key} ''; }; }; }; - security.acme.certs."${opencloudHost}" = { dnsProvider = dns; environmentFile = config.sops.secrets.${dnsPath}.path; group = "caddy"; }; - networking = { firewall = { allowedTCPPorts = [ - service.ports.port0 - service.ports.port1 + service.ports.port0 # 80 + service.ports.port1 # 443 ]; }; };