26 lines
742 B
Nix
26 lines
742 B
Nix
|
{...}: {
|
||
|
|
# See modules/server/caddy.nix
|
||
|
|
services.caddy = {
|
||
|
|
# Wildcard certificates are used whenever possible to avoid leaking domains
|
||
|
|
# to the certificate transparency logs.
|
||
|
|
virtualHosts = let
|
||
|
|
# https://caddy.community/t/caddy-server-that-returns-only-ip-address-as-text/6928
|
||
|
|
ipConfig = ''
|
||
|
|
templates
|
||
|
|
header Content-Type text/plain
|
||
|
|
respond "{{.RemoteIP}}"
|
||
|
|
'';
|
||
|
|
in {
|
||
|
|
# Explicit http:// and https:// disables automatic HTTPS redirect to
|
||
|
|
# allow for easier curl'ing.
|
||
|
|
"http://ip.caspervk.net" = {
|
||
|
|
extraConfig = ipConfig;
|
||
|
|
};
|
||
|
|
"https://ip.caspervk.net" = {
|
||
|
|
useACMEHost = "caspervk.net";
|
||
|
|
extraConfig = ipConfig;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|