Harald Hoyer
0e723e2da8
Mirror of the sgx opencode setup: systemd service on port 4196 fronted by nginx with a per-host ACME cert (DNS-01 via internetbs). Adds amd key + path rule to .sops.yaml so secrets under .secrets/amd/ encrypt for the host.
11 lines
198 B
Nix
11 lines
198 B
Nix
{
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
sops.secrets.internetbs = {
|
|
sopsFile = ../../../.secrets/amd/internetbs.yaml;
|
|
};
|
|
|
|
metacfg.services.acmeBase.credentialsFile = config.sops.secrets.internetbs.path;
|
|
}
|