sid/sid.ovh
1
0
Fork 0
Code Issues 3 Pull requests 2 Projects Releases Packages Wiki Activity Actions

rm step-ca and coredns
All checks were successful
Flake check / flake-check (pull_request) Successful in 20s
Details
Build hosts / build-hosts (pull_request) Successful in 24s
Details

Browse source
This commit is contained in:
sid 2026-05-17 23:01:56 +02:00
parent 5c8d94d03d
commit 27492ea730
7 changed files with 24 additions and 162 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/rx4/services/nginx.nix
View file

@ -7,6 +7,8 @@
let
cfg = config.services.nginx;
inherit (constants) domain;
in
{
imports = [
@ -34,4 +36,21 @@ in
};
};
};
security.acme = {
acceptTerms = true;
defaults = {
email = "admin@${domain}";
dnsProvider = "hetzner";
credentialFiles = {
HETZNER_API_TOKEN_FILE = config.sops.secrets.hetzner-api-key.path;
};
};
};
sops.secrets.hetzner-api-key = {
mode = "0400";
owner = "acme";
group = "acme";
};
}