From 563506d670185fd4eadd4a53c8fae14c02988073 Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Sun, 8 Jun 2025 19:01:22 +0200
Subject: [PATCH] Remove tailscale_auth to allow access from tagged devices

---
 modules/system/services/caddy.nix | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/modules/system/services/caddy.nix b/modules/system/services/caddy.nix
index 714bc5e..a0c377c 100644
--- a/modules/system/services/caddy.nix
+++ b/modules/system/services/caddy.nix
@@ -23,10 +23,7 @@ let
   mkVirtualHostConfig = domain: port: {
     logFormat = "output file ${config.services.caddy.logDir}/access-${domain}.log { mode 640 }";
     extraConfig = ''
-      ${lib.optionalString (isTailscaleDomain domain) ''
-        bind tailscale/${getSubdomain domain}
-        tailscale_auth
-      ''}
+      ${lib.optionalString (isTailscaleDomain domain) "bind tailscale/${getSubdomain domain}"}
       reverse_proxy localhost:${toString port}
     '';
   };