all repos — nixfiles @ 42b51878c262425ed425d6522ad5c658fd75b24d

System and user configuration, managed by nix and home-manager

extract local certificate authority setup to module

Alin
commit

42b51878c262425ed425d6522ad5c658fd75b24d

parent

b0958bfbbde80c9190a128fa8523514ceac71ac6

1 file changed, 0 insertions(+), 39 deletions(-)

changed files
M system/hosts/r6.nix → system/hosts/r6.nix
@@ -106,45 +106,6 @@ "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJVREjPey2TOIPzfYJoG9yIR4Rui7tNJK2QIKa+pbgsyXg31hhPIw37LRRIic+l53mW8eahHxX3Y1IeTjcMw8IU= alan@secretive.marvin.local"
     ];
   };
 
-  services.caddy = {
-    enable = true;
-    globalConfig = ''
-      pki {
-        ca home {
-          name "Home CA"
-        }
-      }
-    '';
-    virtualHosts = {
-      "${hostName}.${domain}" = {
-        serverAliases = [ "${hostName}.${tailnet}" ];
-        extraConfig = ''
-          tls {
-            issuer internal {
-              ca home
-            }
-          }
-          root /var/lib/caddy/ca
-          file_server browse
-        '';
-      };
-      "ca.${domain}" = {
-        extraConfig = ''
-          tls {
-            issuer internal {
-              ca home
-            }
-          }
-          acme_server {
-            allow {
-              domains *.test *.${domain}
-            }
-          }
-        '';
-      };
-    };
-  };
-
   nix = {
     distributedBuilds = true;
     settings = {