koishi/nixos
1
0
Fork 0
Code Issues Pull requests Projects Activity

feat(library): enable acme

Browse source
This commit is contained in:
514fpv 2024-01-15 17:13:03 +08:00
parent d4159deab4
commit 0892f55dd5
Signed by: koishi
SSH key fingerprint: SHA256:axz0uIzzY+5W19i7QOUuiw5LSqhKfCBKPf3L4xFRxLw
2 changed files with 8 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
spec/library/acme.nix
View file

@ -1,18 +1,11 @@
{
security.acme = {
acceptTerms = true;
defaults.email = "koishi@514fpv.one";
defaults.group = "nginx";
certs = let
cloudflare = {
dnsProvider = "cloudflare";
credentialsFile = "/nix/persist/secret/cloudflare";
};
in {
"514fpv.io" = cloudflare;
".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
security.acme.certs = let
cloudflare = {
dnsProvider = "cloudflare";
credentialsFile = "/nix/persist/secret/cloudflare";
};
in {
"514fpv.io" = cloudflare;
".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
};
environment.persistence."/nix/persist/fhs".directories = [ "/var/lib/acme" ];
}

1
spec/library/default.nix
View file

@ -13,6 +13,7 @@
fs.extPersist.device = "/dev/disk/by-uuid/ba3d0989-9f81-4ac0-b5a7-124c86835cfa";
fs.extPersist.fsType = "ext4";
oci.enable = true;
acme.enable = true;
};
networking.proxy = {