harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat(amd): add opencode web server at opencode.amd.hoyer.world

Browse source 
Mirror of the sgx opencode setup: systemd service on port 4196 fronted
by nginx with a per-host ACME cert (DNS-01 via internetbs). Adds amd
key + path rule to .sops.yaml so secrets under .secrets/amd/ encrypt
for the host.
This commit is contained in:
Harald Hoyer 2026-05-03 15:55:15 +02:00
parent 01f42c0851
commit 0e723e2da8
7 changed files with 158 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
systems/x86_64-linux/amd/acme.nix Normal file
View file

@ -0,0 +1,11 @@
{
config,
...
}:
{
sops.secrets.internetbs = {
sopsFile = ../../../.secrets/amd/internetbs.yaml;
};
metacfg.services.acmeBase.credentialsFile = config.sops.secrets.internetbs.path;
}