mirror of
https://github.com/genebean/dots.git
synced 2026-03-27 09:27:44 -04:00
26 lines
1 KiB
Nix
26 lines
1 KiB
Nix
{ config, username, ... }: {
|
|
|
|
##########################################################################
|
|
# #
|
|
# This module sets up Let's Encrypt certs via a DNS challenge to Gandi #
|
|
# #
|
|
##########################################################################
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults = {
|
|
email = "lets-encrypt@technicalissues.us";
|
|
credentialFiles = { "GANDIV5_API_KEY_FILE" = "${config.sops.secrets.gandi_api.path}"; };
|
|
#credentialFiles = { "GANDIV5_PERSONAL_ACCESS_TOKEN_FILE" = gandi_dns_pat; };
|
|
dnsProvider = "gandiv5";
|
|
dnsResolver = "ns1.gandi.net";
|
|
# uncomment below for testing
|
|
#server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
|
};
|
|
};
|
|
|
|
sops = {
|
|
age.keyFile = "${config.users.users.${username}.home}/.config/sops/age/keys.txt";
|
|
secrets.gandi_api.sopsFile = ../secrets.yaml;
|
|
};
|
|
}
|