genebean/dots
1
0
Fork 0
mirror of https://github.com/genebean/dots.git synced 2026-03-27 09:27:44 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Uptime Kuma

Browse source
This commit is contained in:
Gene Liverman 2024-06-13 21:08:09 -04:00
parent ab733daa16
commit 3023a652b1
2 changed files with 90 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

26
modules/system/common/linux/lets-encrypt.nix Normal file
View file

@ -0,0 +1,26 @@
{ config, username, ... }: {
##########################################################################
# #
# This module sets up Let's Encrypt certs via a DNS challenge to Gandi #
# #
##########################################################################
security.acme = {
acceptTerms = true;
defaults = {
email = "lets-encrypt@technicalissues.us";
credentialFiles = { "GANDIV5_API_KEY_FILE" = "${config.sops.secrets.gandi_api.path}"; };
#credentialFiles = { "GANDIV5_PERSONAL_ACCESS_TOKEN_FILE" = gandi_dns_pat; };
dnsProvider = "gandiv5";
dnsResolver = "ns1.gandi.net";
# uncomment below for testing
#server = "https://acme-staging-v02.api.letsencrypt.org/directory";
};
};
sops = {
age.keyFile = /home/${username}/.config/sops/age/keys.txt;
secrets.gandi_api.sopsFile = ../secrets.yaml;
};
}