aboutsummaryrefslogtreecommitdiff
path: root/hosts/enode/default.nix
diff options
context:
space:
mode:
authorIsabella Bastaja <isabella@sorre.xyz>2026-10-27 02:52:12 +0100
committerIsabella Bastaja <isabella@sorre.xyz>2026-10-27 15:19:58 +0100
commit629281ae1d10d3ceacd3f380f233c6adba3d062b (patch)
tree199ef58d32c3d0fad70465c3780b5bd2e2d4f64a /hosts/enode/default.nix
parent25d7468ff6e27a3f04c9cd4767b5632e51d03123 (diff)
enode: set up mTLS access to vaultwarden
Diffstat (limited to 'hosts/enode/default.nix')
-rw-r--r--hosts/enode/default.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/hosts/enode/default.nix b/hosts/enode/default.nix
index 0461bf7..ed9ce34 100644
--- a/hosts/enode/default.nix
+++ b/hosts/enode/default.nix
@@ -123,6 +123,11 @@ in
];
};
+ # so caddy trusts our .internal certs
+ security.pki.certificateFiles = [
+ ../../etc/certs/rootCA.crt
+ ];
+
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave