Harald Hoyer
7f802aaca6
- Moved Searx-related settings from `default.nix` and `nginx.nix` to a dedicated `searx.nix` module for improved modularity and maintainability. - Updated references and ACME certificate configuration to align with the new structure. - Simplifies management of Searx service and its associated secrets.
21 lines
426 B
Nix
21 lines
426 B
Nix
{
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
sops.secrets.internetbs = {
|
|
sopsFile = ../../../.secrets/sgx/internetbs.yaml; # bring your own password file
|
|
};
|
|
|
|
metacfg.services.acmeBase.credentialsFile = config.sops.secrets.internetbs.path;
|
|
|
|
security.acme.certs = {
|
|
"internal.hoyer.world" = {
|
|
extraDomainNames = [
|
|
"openwebui.hoyer.world"
|
|
"syncthing.hoyer.world"
|
|
"home.hoyer.world"
|
|
];
|
|
};
|
|
};
|
|
}
|