SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 17:31:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Always disable caddy's admin endpoint

Browse source
This commit is contained in:
SebastianStork 2025-07-05 20:48:19 +02:00
parent 56b28f055d
commit 155b9b2a30
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/system/services/caddy.nix
View file

@ -69,6 +69,7 @@ in
services.caddy = { services.caddy = {
enable = true; enable = true;
enableReload = false; enableReload = false;
globalConfig = "admin off";
virtualHosts = virtualHosts =
virtualHosts virtualHosts
|> lib.mapAttrs' ( |> lib.mapAttrs' (
@ -83,8 +84,6 @@ in
services.caddy = { services.caddy = {
package = caddyWithTailscale; package = caddyWithTailscale;
globalConfig = '' globalConfig = ''
admin off
tailscale { tailscale {
auth_key {file.${config.sops.secrets."service-tailscale-auth-key".path}} auth_key {file.${config.sops.secrets."service-tailscale-auth-key".path}}
} }