diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-11-20 10:35:18 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-11-20 10:35:18 -0800 |
| commit | 938db48a818a5c0629ee8111934b7d928f3a6900 (patch) | |
| tree | b67cfcc2956562b1d9487b0f19c7faea7e894ef1 /profiles | |
| parent | configure backups correctly (diff) | |
| download | infra-938db48a818a5c0629ee8111934b7d928f3a6900.tar.gz | |
move acme configurations to a profile
Clean up API keys for Cloudflare.
Diffstat (limited to 'profiles')
| -rw-r--r-- | profiles/acme.nix | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/profiles/acme.nix b/profiles/acme.nix new file mode 100644 index 0000000..4bdadad --- /dev/null +++ b/profiles/acme.nix @@ -0,0 +1,13 @@ +{ config, ... }: +{ + + age.secrets.cloudflare-env.file = ../secrets/cloudflare-env.age; + + security.acme.acceptTerms = true; + security.acme.defaults = { + email = "franck@fcuny.net"; + dnsResolver = "1.1.1.1:53"; + dnsProvider = "cloudflare"; + credentialsFile = config.age.secrets.cloudflare-env.path; + }; +} |