all repos — nixfiles @ 4a94984718a95c35b80eba4b875e7f9f75826928

System and user configuration, managed by nix and home-manager

caddy: move caddy secrets to reverse proxy config

Alin
commit

4a94984718a95c35b80eba4b875e7f9f75826928

parent

4b40fa9ece26c606abe7b405b4cd56c897a14b21

1 file changed, 7 insertions(+), 0 deletions(-)

changed files
M system/roles/reverse-proxy.nix → system/roles/reverse-proxy.nix
@@ -1,4 +1,5 @@
 {
+  config,
   pkgs,
   ...
 }:

@@ -6,8 +7,14 @@ {
   imports = [
     ../settings/configuration/nur.nix
   ];
+  age.secrets = {
+    # TS_AUTHKEY for caddy-tailscale plugin
+    caddy.file = ../../secrets/caddy.age;
+  };
+
 
   services.caddy = {
+    environmentFile = config.age.secrets.caddy.path;
     package = pkgs.nur.repos.xyenon.caddy.withPlugins {
       plugins = [
         "github.com/caddyserver/cache-handler@v0.16.0"