koishi/nixos
1
0
Fork 0
Code Issues Pull requests Projects Activity

feat(focus): enable libvirt and acme

Browse source
This commit is contained in:
514fpv 2024-01-27 09:55:36 +08:00
parent 16f597ef8a
commit 8adda87035
Signed by: koishi
SSH key fingerprint: SHA256:axz0uIzzY+5W19i7QOUuiw5LSqhKfCBKPf3L4xFRxLw
2 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
spec/focus/acme.nix Normal file
View file

@ -0,0 +1,11 @@
{
security.acme.certs = let
cloudflare = {
dnsProvider = "cloudflare";
credentialsFile = "/nix/persist/secret/cloudflare";
};
in {
"sf.514fpv.io" = cloudflare;
".sf.514fpv.io" = cloudflare // { domain = "*.sf.514fpv.io"; };
};
}

2
spec/focus/default.nix
View file

@ -3,7 +3,6 @@
global = { global = {
id = "22e9d4e37bd7436ba0cbe6e767fb0912"; id = "22e9d4e37bd7436ba0cbe6e767fb0912";
auth.openssh.enable = true; auth.openssh.enable = true;
libvirt.enable = false;
fs.esp.uuid = "8C36-CBE2"; fs.esp.uuid = "8C36-CBE2";
fs.type = "zfs"; fs.type = "zfs";
fs.zfs.externalStore = true; fs.zfs.externalStore = true;
@ -14,6 +13,7 @@
fs.cryptsetup.allowDiscards = false; fs.cryptsetup.allowDiscards = false;
fs.cryptsetup.uuids.secret = "c2bc361e-6f9a-48fa-b698-ed3603a9664a"; fs.cryptsetup.uuids.secret = "c2bc361e-6f9a-48fa-b698-ed3603a9664a";
boot.lanzaboote = true; boot.lanzaboote = true;
acme.enable = true;
}; };
services.fstrim.enable = true; services.fstrim.enable = true;