From 3ac55ee20a4ed14d37a7ebd141e70dc500265e09 Mon Sep 17 00:00:00 2001
From: Guanran Wang <guanran928@outlook.com>
Date: Sun, 30 Jun 2024 14:33:43 +0800
Subject: [PATCH] fixup! nixos: use cloudflare cdn

---
 hosts/lightsail-tokyo/Caddyfile   | 6 ++++++
 hosts/lightsail-tokyo/default.nix | 4 ++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/hosts/lightsail-tokyo/Caddyfile b/hosts/lightsail-tokyo/Caddyfile
index 034c17b..e8a02fc 100644
--- a/hosts/lightsail-tokyo/Caddyfile
+++ b/hosts/lightsail-tokyo/Caddyfile
@@ -33,6 +33,12 @@ www.ny4.dev {
 	redir https://ny4.dev
 }
 
+# get the certificate for hysteria
+tyo0.ny4.dev {
+	import default
+	redir https://ny4.dev
+}
+
 ny4.dev {
 	import default
 
diff --git a/hosts/lightsail-tokyo/default.nix b/hosts/lightsail-tokyo/default.nix
index 317bf5b..6334ede 100644
--- a/hosts/lightsail-tokyo/default.nix
+++ b/hosts/lightsail-tokyo/default.nix
@@ -100,8 +100,8 @@
     configFile = config.sops.templates."hysteria.yaml".path;
     credentials = [
       # FIXME: remove hardcoded path
-      "cert:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/ny4.dev/ny4.dev.crt"
-      "key:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/ny4.dev/ny4.dev.key"
+      "cert:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/tyo0.ny4.dev/tyo0.ny4.dev.crt"
+      "key:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/tyo0.ny4.dev/tyo0.ny4.dev.key"
     ];
   };