caddy: init

modules/services/caddy.nix

@@ -0,0 +1,34 @@
+{ pkgs, config, lib, ... }:
+
+{
+  options = {
+    homelab.domain = lib.mkOption {
+      type = lib.types.str;
+    };
+  };
+
+  config = {
+    homelab.domain = "nyanyanya.myaddr.io";
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
+    
+    services.caddy = {
+      enable = true;
+    };
+
+    security.acme = {
+      acceptTerms = true;
+      defaults.email = "nicocute@proton.me";
+
+      certs."${config.homelab.domain}" = {
+        group = config.services.caddy.group;
+
+        domain = "${config.homelab.domain}";
+        extraDomainNames = [ "*.${config.homelab.domain}" ];
+        dnsProvider = "myaddr";
+        dnsResolver = "1.1.1.1:53";
+        dnsPropagationCheck = true;
+        environmentFile = /var/lib/caddy/secret;
+      };
+    };
+  };
+}