all repos — nixfiles @ 58a7d96bc32b0ad97ad3d7554628b6f83ed7b559

System and user configuration, managed by nix and home-manager

dev: use caddy snippet to enable local tls

Alan Pearce
commit

58a7d96bc32b0ad97ad3d7554628b6f83ed7b559

parent

94e52b413e92c6c9ec1beba81f3f061a19b98952

1 file changed, 16 insertions(+), 14 deletions(-)

changed files
M system/settings/dev.nix → system/settings/dev.nix
@@ -22,21 +22,20 @@
   config = mkIf cfg.enable {
     services.caddy = {
       enable = true;
-      virtualHosts =
-        let
-          local_tls = ''
-            tls {
-              issuer internal {
-                ca local
-              }
+      extraConfig = ''
+        (local_tls) {
+          tls {
+            issuer internal {
+              ca local
             }
-          '';
-        in
-        {
+          }
+        }
+      '';
+      virtualHosts = {
           "localhost" = {
             logFormat = "output discard";
             extraConfig = ''
-              ${local_tls}
+              import local_tls
               acme_server {
                 allow {
                   domains *.test *.localhost

@@ -52,7 +51,7 @@ "alanpearce.test"
               "alanpearce.localhost"
             ];
             extraConfig = ''
-              ${local_tls}
+              import local_tls
               reverse_proxy http://localhost:8080 {
                 transport http {
                   dial_timeout 1s

@@ -64,7 +63,7 @@ };
           "elgit.localhost" = {
             logFormat = "output discard";
             extraConfig = ''
-              ${local_tls}
+              import local_tls
               reverse_proxy http://localhost:5555 {
                 transport http {
                    dial_timeout 1s

@@ -76,6 +75,7 @@ };
           "searchix.localhost" = {
             logFormat = "output discard";
             extraConfig = ''
+              import local_tls
               handle_errors {
                 rewrite * /error.html
                 templates

@@ -94,12 +94,14 @@ };
           "auth.localhost" = {
             logFormat = "output discard";
             extraConfig = ''
+              import local_tls
               reverse_proxy http://localhost:8082
             '';
           };
           "xhain.localhost" = {
             logFormat = "output discard";
             extraConfig = ''
+              import local_tls
               root * /Users/alan/projects/github.com/xHain-hackspace/xhain-website/public/
               file_server
             '';

@@ -107,6 +109,7 @@ };
           "hugo.localhost" = {
             logFormat = "output discard";
             extraConfig = ''
+              import local_tls
               reverse_proxy http://localhost:1313 {
                 transport http {
                   dial_timeout 1s

@@ -117,6 +120,5 @@ '';
           };
         };
     };
-
   };
 }