home/hosts/odin/services/caddy.nix

{ config, pkgs, ... }:
{
  services.caddy = {
    enable = true;
    package = pkgs.caddy.withPlugins {
      plugins = [ "github.com/caddy-dns/[email protected]" ];
      hash = "sha256-p9AIi6MSWm0umUB83HPQoU8SyPkX5pMx989zAi8d/74=";
    };
    environmentFile = config.age.secrets."odin/services/caddy".path;
    # TODO: set to null for production
    acmeCA = "https://acme-staging-v02.api.letsencrypt.org/directory";
    globalConfig = ''
      acme_dns cloudflare {env.CF_API_TOKEN}
    '';

    virtualHosts.welcome.hostName = "{$DOMAIN}";
    virtualHosts.welcome.extraConfig = ''
      respond "Hello World"
    '';
  };
}