infra/modules/caddy/default.nix

{ config
, lib
, pkgs
, flake
, ...
}:
{
 services.caddy = {
    enable = lib.mkForce true;
    group = config.pub-solar-os.authentication.robot.username;
    email = config.pub-solar-os.adminEmail;
    enableReload = true;
    globalConfig = lib.mkForce ''
      grace_period 60s
    '';
  };
  networking.firewall.allowedTCPPorts = [ 80 443 ];
}