roles/common/configuration.nix

@@ -45,23 +45,6 @@
 
   boot.supportedFilesystems = ["nfs"];
 
-  security.pki.certificates = [
-    # Caddy
-    ''
-      -----BEGIN CERTIFICATE-----
-      MIIBqTCCAU+gAwIBAgIQceh0ZUBNrOmqLVsDr+2HBjAKBggqhkjOPQQDAjAzMTEw
-      LwYDVQQDEyhDYWRkeSAoRXZlcmVzdCkgbG9jYWwgQ0EgLSAyMDI0IEVDQyBSb290
-      MB4XDTI0MDcxODAwMDEwM1oXDTM0MDUyNzAwMDEwM1owMzExMC8GA1UEAxMoQ2Fk
-      ZHkgKEV2ZXJlc3QpIGxvY2FsIENBIC0gMjAyNCBFQ0MgUm9vdDBZMBMGByqGSM49
-      AgEGCCqGSM49AwEHA0IABJjrY8x6iDXncxG8exwLyaEq8N0XnCIbga8PVYiz3VLS
-      07++i0Dey9k68ag6KUZICfc8dX1uZ6/ozUZb4YO3xCSjRTBDMA4GA1UdDwEB/wQE
-      AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBTQAqZS9KeiAr9mSPV9
-      RIJbSvRsTzAKBggqhkjOPQQDAgNIADBFAiBIgHrD2cUfNEctVx0WzHb0cLAsrK4Q
-      3QbyxPLyenR+dAIhAMOIAyxlKKKvAJMOzAg0r+csSVRdP1YHsHiE7U1GeHWx
-      -----END CERTIFICATE-----
-    ''
-  ];
-
   # Set up localisation
   i18n = {
     defaultLocale = "en_US.UTF-8";

roles/server/caddy.nix

@@ -3,13 +3,6 @@
 in {
   services.caddy = {
     enable = true;
-    globalConfig = ''
-      pki {
-        ca local {
-          name "Caddy (Everest) local CA"
-        }
-      }
-    '';
     extraConfig = ''
       (tailscale) {
         tls internal