servers/common/caddy.nix

{
  config,
  lib,
  ...
}:
let
  inherit (lib) mkIf mkEnableOption;
  cfg = config.foehammer.caddy;
in
{
  options.foehammer.caddy.enable = mkEnableOption "Enable caddy with default configuration.";
  config = mkIf cfg.enable {
    services.caddy = {
      enable = true;
      email = "foehammer127points+acme@gmail.com";
    };

    networking.firewall.allowedTCPPorts = [
      80
      443
    ];
  };
}