william/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

overhauling secrets: part 1

Browse source
This commit is contained in:
William 2023-07-13 14:31:43 -03:00
parent b6fa154e87
commit d01f3cb86f
3 changed files with 25 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

14
hosts/servers/alexandria/security.nix
View file

@ -1,19 +1,13 @@
{ inputs, config, pkgs, lib, ... }:
{
age.secrets.cloudflare-creds = {
file = ../../../secrets/cloudflare-creds.age;
owner = "nginx";
group = "hosted";
};
security.acme = {
acceptTerms = true;
defaults = {
email = "baduhai@proton.me";
dnsResolver = "1.1.1.1:53";
dnsProvider = "cloudflare";
credentialsFile = config.age.secrets.cloudflare-creds.path;
credentialsFile = config.age.secrets.cloudflare.path;
};
certs."baduhai.me" = { extraDomainNames = [ "*.baduhai.me" ]; };
};
@ -22,4 +16,10 @@
"net.ipv4.ip_forward" = 1;
"net.ipv6.conf.all.forwarding" = 1;
};
age.secrets.cloudflare = {
file = ../../../secrets/cloudflare.age;
owner = "nginx";
group = "hosted";
};
}