caddy: Only install tailscale plugin when tailscale hosts exist

This commit is contained in:
SebastianStork 2025-11-03 23:35:10 +01:00
parent 145e76cec7
commit d3dbe02b01
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q

View file

@ -70,10 +70,6 @@ in
services.caddy = { services.caddy = {
enable = true; enable = true;
package = pkgs.caddy.withPlugins {
plugins = [ "github.com/tailscale/caddy-tailscale@v0.0.0-20250508175905-642f61fea3cc" ];
hash = "sha256-bw2ZH+XTQlyYw5LgkVr+oEeL8Nf4j/KO2XQIUrsVpiU=";
};
enableReload = false; enableReload = false;
globalConfig = '' globalConfig = ''
admin off admin off
@ -97,12 +93,18 @@ in
restartUnits = [ "caddy.service" ]; restartUnits = [ "caddy.service" ];
}; };
services.caddy.globalConfig = '' services.caddy = {
tailscale { package = pkgs.caddy.withPlugins {
auth_key {file.${config.sops.secrets."tailscale/service-auth-key".path}} plugins = [ "github.com/tailscale/caddy-tailscale@v0.0.0-20250508175905-642f61fea3cc" ];
ephemeral true hash = "sha256-bw2ZH+XTQlyYw5LgkVr+oEeL8Nf4j/KO2XQIUrsVpiU=";
} };
''; globalConfig = ''
tailscale {
auth_key {file.${config.sops.secrets."tailscale/service-auth-key".path}}
ephemeral true
}
'';
};
}) })
] ]
); );