Harald Hoyer
95c68ccc7d
Change the sopsFile path in acme.nix to point to the sgx directory instead of hetzner to ensure the correct configuration file is referenced. Added a new encrypted secrets file specific to the sgx directory to maintain security and confidentiality.
24 lines
422 B
Nix
24 lines
422 B
Nix
{
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
sops.secrets.internetbs = {
|
|
sopsFile = ../../../.secrets/sgx/internetbs.yaml; # bring your own password file
|
|
};
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults = {
|
|
email = "harald@hoyer.xyz";
|
|
dnsProvider = "cloudflare";
|
|
credentialsFile = config.sops.secrets.internetbs.path;
|
|
};
|
|
certs = {
|
|
"internal.hoyer.world" = { };
|
|
};
|
|
};
|
|
}
|