caddy: wildcard TLS via DNS-01 challenge + ddns-updater for Njalla

Browse Source

Build Caddy with the caddy-dns/njalla plugin to enable DNS-01 ACME
challenges. This issues a single wildcard certificate for
*.sigkill.computer instead of per-subdomain certificates, reducing
Let's Encrypt API calls and certificate management overhead.

Add ddns-updater service (nixpkgs services.ddns-updater) configured
with Njalla provider to automatically update DNS records when the
server's public IP changes.

...

This commit is contained in:

Simon Gardling

2026-04-09 19:46:40 -04:00

parent e9ce1ce0a2

commit ce1c335230

6 changed files with 45 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

secrets/ddns-updater-config.age Normal file

Binary file not shown.

BIN

secrets/njalla-api-token-env.age Normal file

Binary file not shown.