24 lines
426 B
Nix
24 lines
426 B
Nix
|
{
|
||
|
|
pkgs,
|
||
|
|
lib,
|
||
|
|
config,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
{
|
||
|
|
sops.secrets.internetbs = {
|
||
|
|
sopsFile = ../../../.secrets/hetzner/internetbs.yaml; # bring your own password file
|
||
|
|
};
|
||
|
|
|
||
|
|
security.acme = {
|
||
|
|
acceptTerms = true;
|
||
|
|
defaults = {
|
||
|
|
email = "harald@hoyer.xyz";
|
||
|
|
dnsProvider = "cloudflare";
|
||
|
|
credentialsFile = config.sops.secrets.internetbs.path;
|
||
|
|
};
|
||
|
|
certs = {
|
||
|
|
"internal.hoyer.world" = { };
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|