diff options
Diffstat (limited to 'hosts/tower/web')
| -rw-r--r-- | hosts/tower/web/caddy.nix | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix index ae471e1..f375d3b 100644 --- a/hosts/tower/web/caddy.nix +++ b/hosts/tower/web/caddy.nix @@ -23,6 +23,8 @@ let package = config.services.kanboard.package; }; blog.port = 7291; + + tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key"; in { networking.firewall.allowedTCPPorts = [ blog.port ]; @@ -33,7 +35,7 @@ in "${vw.domain}" = { listenAddresses = [ wg-ip ]; extraConfig = '' - tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key + ${tls-config} reverse_proxy :${toString vw.port} { header_up True-Client-IP {remote_host} @@ -45,7 +47,7 @@ in "${navidrome.domain}" = { listenAddresses = [ wg-ip ]; extraConfig = '' - tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key + ${tls-config} reverse_proxy :${toString navidrome.port} { header_up True-Client-IP {remote_host} @@ -66,7 +68,7 @@ in "${kanboard.domain}" = { listenAddresses = [ wg-ip ]; extraConfig = '' - tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key + ${tls-config} root ${kanboard.package}/share/kanboard php_fastcgi unix/${kanboard.socket} @@ -95,8 +97,8 @@ in fi ''; serviceConfig.LoadCredential = [ - "sagittarius.crt:/var/lib/secrets/certs/sagittarius.crt" - "sagittarius.key:/var/lib/secrets/certs/sagittarius.key" + "sorre.internal.crt:/var/lib/secrets/certs/sorre.internal.crt" + "sorre.internal.key:/var/lib/secrets/certs/sorre.internal.key" ]; }; } |