nix/hosts/marvin/services/caddy.nix

{
  lib,
  pkgs,
  ...
}: {
  services.caddy = {
    enable = true;
    package = pkgs.callPackage ./custom-caddy.nix {
      plugins = ["github.com/caddy-dns/cloudflare"];
      vendorSha256 = "sha256-1SBOXv2RGLlTT/mguPjTASU5AeQNIVySgVMgvu5BH6w=";
    };
    extraConfig = ''
      cache.mrhedgehog.xyz {
        tls {
          dns cloudflare {env.CF_AUTH_TOKEN}
        }
        reverse_proxy http://localhost:5000
      }
      hydra.mrhedgehog.xyz {
        tls {
          dns cloudflare {env.CF_AUTH_TOKEN}
        }
        reverse_proxy http://localhost:3000
      }
      reddit.mrhedgehog.xyz {
        tls {
          dns cloudflare {env.CF_AUTH_TOKEN}
        }
        reverse_proxy http://localhost:4000
      }
    '';
  };
}