Toast/nix-stuff
1
0
Fork 0
Code Issues Pull requests Projects 1 Wiki Activity

Compare commits

base: Toast:e1f4b528c6aee4564cfc0973e7f184cd2f66b258
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05
..
compare: Toast:1b96024e4a3c568979a3a8c095e68e441d4439fc
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05

2 commits
e1f4b528c6 ... 1b96024e4a

Author SHA1 Message Date
Toast
1b96024e4a Common: add Caddy root ca 2024-07-18 02:04:41 +02:00
Toast
114fcad32e Server/caddy: change name of the root ca cert 2024-07-18 02:01:41 +02:00
2 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
roles/common/configuration.nix
View file

@ -45,6 +45,23 @@
boot.supportedFilesystems = ["nfs"]; boot.supportedFilesystems = ["nfs"];
security.pki.certificates = [
# Caddy
''
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
''
];
# Set up localisation # Set up localisation
i18n = { i18n = {
defaultLocale = "en_US.UTF-8"; defaultLocale = "en_US.UTF-8";

7
roles/server/caddy.nix
View file

@ -3,6 +3,13 @@
in { in {
services.caddy = { services.caddy = {
enable = true; enable = true;
globalConfig = ''
pki {
ca local {
name "Caddy (Everest) local CA"
}
}
'';
extraConfig = '' extraConfig = ''
(tailscale) { (tailscale) {
tls internal tls internal