From 2d030921fff598ef476ab9c4f805fe766f1a5f86 Mon Sep 17 00:00:00 2001
From: Erwin Boskma <erwin@horus.nu>
Date: Mon, 23 Oct 2023 08:10:12 +0200
Subject: [PATCH] heimdall: Allow caddy to get certificates

---
 machines/heimdall/configuration.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/machines/heimdall/configuration.nix b/machines/heimdall/configuration.nix
index 6df737c..2b373c8 100644
--- a/machines/heimdall/configuration.nix
+++ b/machines/heimdall/configuration.nix
@@ -86,7 +86,10 @@
         PasswordAuthentication = false;
       };
     };
-    tailscale.enable = true;
+    tailscale = {
+      enable = true;
+      permitCertUid = "caddy";
+    };
 
     caddy = {
       virtualHosts = {