all repos — nixfiles @ 055da2741299eccc2074ca36d857e94ec90ff2d0

System and user configuration, managed by nix and home-manager

reverse-proxy: enable DNS01 challenge solution in caddy

Alin
commit

055da2741299eccc2074ca36d857e94ec90ff2d0

parent

328d7e101274d2dc943fcbefdb677da9f7d001b6

2 files changed, 8 insertions(+), 1 deletion(-)

changed files
M secrets/caddy.age → secrets/caddy.age

Not showing binary file.

M system/roles/reverse-proxy.nix → system/roles/reverse-proxy.nix
@@ -30,8 +30,9 @@ plugins = [
         "github.com/caddyserver/cache-handler@v0.16.0"
         "github.com/mholt/caddy-l4@v0.0.0-20260212155620-dd12cc413469"
         "github.com/tailscale/caddy-tailscale@v0.0.0-20260106222316-bb080c4414ac"
+        "github.com/caddy-dns/rfc2136@v1.0.0"
       ];
-      hash = "sha256-/oKSa7IEdB0IVAd8172WgoMPd6QEVK08fUZgNR/w86w=";
+      hash = "sha256-mBGYM2z2KGp6N3iaRc1v3VD56BpP5bEnpu815wImQHc=";
     };
     globalConfig = ''
       cache

@@ -49,6 +50,12 @@ }
       }
       tailscale {
         tags tag:app
+      }
+      acme_dns rfc2136 {
+        key_name caddy
+        key_alg hmac-sha512
+        key "{env.DDNS_TSIG_KEY}"
+        server [::1]:53
       }
     '';
   };