From 482d52f492d93bf58cf98aa01b6852ceeadaf58f Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Sat, 22 Aug 2026 15:27:13 +0200
Subject: tower: rename cert to be more accurate

---
 hosts/tower/web/caddy.nix | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index ae471e1..f375d3b 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -23,6 +23,8 @@ let
     package = config.services.kanboard.package;
   };
   blog.port = 7291;
+
+  tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key";
 in
 {
   networking.firewall.allowedTCPPorts = [ blog.port ];
@@ -33,7 +35,7 @@ in
       "${vw.domain}" = {
         listenAddresses = [ wg-ip ];
         extraConfig = ''
-          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+          ${tls-config}
 
           reverse_proxy :${toString vw.port} {
             header_up True-Client-IP {remote_host}
@@ -45,7 +47,7 @@ in
       "${navidrome.domain}" = {
         listenAddresses = [ wg-ip ];
         extraConfig = ''
-          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+          ${tls-config}
 
           reverse_proxy :${toString navidrome.port} {
             header_up True-Client-IP {remote_host}
@@ -66,7 +68,7 @@ in
       "${kanboard.domain}" = {
         listenAddresses = [ wg-ip ];
         extraConfig = ''
-          tls {$CREDENTIALS_DIRECTORY}/sagittarius.crt {$CREDENTIALS_DIRECTORY}/sagittarius.key
+          ${tls-config}
 
           root ${kanboard.package}/share/kanboard
           php_fastcgi unix/${kanboard.socket}
@@ -95,8 +97,8 @@ in
       fi
     '';
     serviceConfig.LoadCredential = [
-      "sagittarius.crt:/var/lib/secrets/certs/sagittarius.crt"
-      "sagittarius.key:/var/lib/secrets/certs/sagittarius.key"
+      "sorre.internal.crt:/var/lib/secrets/certs/sorre.internal.crt"
+      "sorre.internal.key:/var/lib/secrets/certs/sorre.internal.key"
     ];
   };
 }
-- 
cgit v1.3.1