tower: rename cert to be more accurate

1 files changed, 7 insertions, 5 deletions

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index ae471e1..f375d3b 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -23,6 +23,8 @@ let
     package = config.services.kanboard.package;
   };
   blog.port = 7291;
+
+  tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key";
 in
 {
   networking.firewall.allowedTCPPorts = [ blog.port ];
@@ -33,7 +35,7 @@ in
       "${vw.domain}" = {
         listenAddresses = [ wg-ip ];
         extraConfig = ''
-          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+          ${tls-config}
 
           reverse_proxy :${toString vw.port} {
             header_up True-Client-IP {remote_host}
@@ -45,7 +47,7 @@ in
       "${navidrome.domain}" = {
         listenAddresses = [ wg-ip ];
         extraConfig = ''
-          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+          ${tls-config}
 
           reverse_proxy :${toString navidrome.port} {
             header_up True-Client-IP {remote_host}
@@ -66,7 +68,7 @@ in
       "${kanboard.domain}" = {
         listenAddresses = [ wg-ip ];
         extraConfig = ''
-          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+          ${tls-config}
 
           root ${kanboard.package}/share/kanboard
           php_fastcgi unix/${kanboard.socket}
@@ -95,8 +97,8 @@ in
       fi
     '';
     serviceConfig.LoadCredential = [
-      "sagittarius.crt:/var/lib/secrets/certs/sagittarius.crt"
-      "sagittarius.key:/var/lib/secrets/certs/sagittarius.key"
+      "sorre.internal.crt:/var/lib/secrets/certs/sorre.internal.crt"
+      "sorre.internal.key:/var/lib/secrets/certs/sorre.internal.key"
     ];
   };
 }