bchmnn/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: change from namecheap to cloudflare, setup tls with acme, setup vaultwarden

Browse source
This commit is contained in:
Jacob Bachmann 2024-09-10 00:32:58 +02:00
parent 6b55345b66
commit fd794698d3
No known key found for this signature in database
GPG key ID: 7753026D577922A6
12 changed files with 118 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/APPA/services/acme.nix Normal file
View file

@ -0,0 +1,19 @@
{ config, ... }:
{
age.secrets.environments-acme = {
file = ../../../secrets/environments/acme.age;
};
security.acme.acceptTerms = true;
security.acme.defaults.email = "gendulf@posteo.de";
security.acme.certs."dryb.org" = {
domain = "dryb.org";
extraDomainNames = [ "*.dryb.org" ];
dnsProvider = "cloudflare";
dnsPropagationCheck = true;
credentialsFile = config.age.secrets.environments-acme.path;
};
users.users.nginx.extraGroups = [ "acme" ];
}