From bb633e5bcebde5f33899796b2c70933fac7ad0e2 Mon Sep 17 00:00:00 2001
From: Yuri Tatishchev <itatishch@gmail.com>
Date: Sun, 11 May 2025 19:33:37 -0700
Subject: [PATCH] router: services: caddy acme dns provider cloudflare

---
 hosts/router/services.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/hosts/router/services.nix b/hosts/router/services.nix
index 95b0755..060ecc2 100644
--- a/hosts/router/services.nix
+++ b/hosts/router/services.nix
@@ -49,8 +49,15 @@ in
 
   services.caddy = {
     enable = true;
+    package = pkgs.caddy.withPlugins {
+      plugins = [ "github.com/caddy-dns/cloudflare@v0.2.1" ];
+      hash = "sha256-saKJatiBZ4775IV2C5JLOmZ4BwHKFtRZan94aS5pO90=";
+    };
     virtualHosts."grouter.${domain}".extraConfig = ''
-      tls internal
+      tls {
+          dns cloudflare xx
+          resolvers 1.1.1.1
+      }
       @grafana path /grafana /grafana/*
       handle @grafana {
           reverse_proxy localhost:${toString config.services.grafana.settings.server.http_port}