Harald Hoyer
04ebe32c3c
Runs on sgx so alerts (via Gmail) still work even if mx is down. Available at https://status.hoyer.world behind nginx with ACME cert. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
22 lines
455 B
Nix
22 lines
455 B
Nix
{
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
sops.secrets.internetbs = {
|
|
sopsFile = ../../../.secrets/sgx/internetbs.yaml; # bring your own password file
|
|
};
|
|
|
|
metacfg.services.acmeBase.credentialsFile = config.sops.secrets.internetbs.path;
|
|
|
|
security.acme.certs = {
|
|
"internal.hoyer.world" = {
|
|
extraDomainNames = [
|
|
"openwebui.hoyer.world"
|
|
"syncthing.hoyer.world"
|
|
"home.hoyer.world"
|
|
"status.hoyer.world"
|
|
];
|
|
};
|
|
};
|
|
}
|