website: caddy cloudflare package

2024-12-02 18:55:35 +11:00 · 2024-12-02 18:55:35 +11:00 · a9ef09a8a4
commit a9ef09a8a4
parent c096dc295a
5 changed files with 95 additions and 25 deletions
--- a/modules/nixos/server/webserver/caddy.nix
+++ b/modules/nixos/server/webserver/caddy.nix
@ -1,16 +1,31 @@
 {
  config,
  lib,
+  self',
  ...
 }: let
-  inherit (lib) mkIf;
+  inherit (lib) mkIf mkMerge;
  inherit (config.ooknet.server.webserver) caddy;
 in {
  config = mkIf caddy.enable {
    users.groups.www = {};
-    services.caddy = {
-      enable = true;
-      group = "www";
-    };
+    services.caddy = mkMerge [
+      {
+        enable = true;
+        group = "www";
+      }
+
+      (mkIf caddy.cloudflare.enable {
+        package = self'.packages.caddy-with-cloudflare;
+        globalConfig = ''
+          servers {
+            trusted_proxies cloudflare {
+            interval 12h
+            timeout 15s
+            }
+          }
+        '';
+      })
+    ];
  };
 }