dotfiles/modules/nixos/services/caddy/caddyCeres/default.nix

36 lines
622 B
Nix

{ flake, ... }:
let
inherit (flake.config.services.instances) caddy web;
domain0 = web.domains.url0;
service = caddy;
in
{
services.caddy = {
enable = true;
virtualHosts = {
"${domain0}" = {
extraConfig = ''
tls /var/lib/acme/${domain0}/fullchain.pem /var/lib/acme/${domain0}/key.pem
encode zstd gzip
'';
};
};
};
users.users.${service.name}.extraGroups = [
"acme"
"mastodon"
"firefly-iii"
];
networking = {
firewall = {
allowedTCPPorts = [
service.ports.port0
service.ports.port1
];
};
};
}