configuration.nix/hosts/rico2/services/caddy.nix

{
  config,
  secrets,
  ...
}: {
  services.caddy = {
    enable = true;
    inherit (secrets.caddy_config) email;
  };
}