This commit is contained in:
암냥 2026-09-07 11:16:13 +09:00
commit 006bcb47ce
3 changed files with 27 additions and 7 deletions

View file

@ -151,7 +151,7 @@ in
openFirewall = true;
package = pkgs.caddy.withPlugins {
plugins = [
"github.com/caddy-dns/cloudflare@v0.2.2"
"github.com/caddy-dns/cloudflare@v0.2.4"
"github.com/aksdb/caddy-cgi/v2@v2.2.6"
"github.com/shift72/caddy-geo-ip@v0.6.0"
"github.com/lolPants/caddy-requestid@v1.1.2"
@ -161,7 +161,7 @@ in
"github.com/RussellLuo/caddy-ext/ratelimit@v0.3.0"
"github.com/neodyme-labs/user_agent_parse@v0.0.1"
];
hash = "sha256-z9/LF2gws+H0pKL6F62QfklD0W8DKWCccnXLOOs3+jY=";
hash = "sha256-r4MgRk8HpKYx7f8FmA3PKgD/5ZNTIHpQvlE+zRbP0lw=";
};
globalConfig = ''
@ -394,7 +394,9 @@ in
requires = [ "mnt-static.mount" ];
after = [ "mnt-static.mount" "systemd-tmpfiles-setup.service" ];
serviceConfig = {
EnvironmentFile = "-/etc/caddy/cloudflare.env";
# Keep the manually provisioned token outside NixOS-managed /etc.
# /var/lib/caddy is persistent across system generations.
EnvironmentFile = "/var/lib/caddy/cloudflare.env";
RuntimeDirectory = "caddy";
RuntimeDirectoryMode = "0755";
};