roles/printserver: change reverse proxy from caddy to traefik

roles/printserver.nix

@@ -126,18 +126,21 @@ in
         '';
       };
 
-      services.tailscale.permitCertUid = "caddy";
-
-      services.caddy = {
-        enable = true;
-        virtualHosts."${config.networking.hostName}.tail755c5.ts.net" = {
-          extraConfig = ''
-            reverse_proxy https://127.0.0.1:${toString cupsGuiPort} {
-              transport http {
-                tls tls_insecure_skip_verify
-              }
+      traefik.enable = true;
+      services.traefik.dynamicConfigOptions = {
+        http.routers.cups = {
+          entrypoints = [ "websecure" ];
+          rule = "Host(`${config.networking.hostName}.tail755c5.ts.net`)";
+          tls.certresolver = "tailscale";
+          service = "cups";
+        };
+        http.services.cups.loadbalancer = {
+          servers = [
+            {
+              url = "https://127.0.0.1:${toString cupsGuiPort}";
             }
-          '';
+          ];
+          tls.insecureSkipVerify = true;
         };
       };
     };