From 938db48a818a5c0629ee8111934b7d928f3a6900 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Thu, 20 Nov 2025 10:35:18 -0800
Subject: move acme configurations to a profile

Clean up API keys for Cloudflare.
---
 profiles/acme.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 profiles/acme.nix

(limited to 'profiles')

diff --git a/profiles/acme.nix b/profiles/acme.nix
new file mode 100644
index 0000000..4bdadad
--- /dev/null
+++ b/profiles/acme.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+{
+
+  age.secrets.cloudflare-env.file = ../secrets/cloudflare-env.age;
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults = {
+    email = "franck@fcuny.net";
+    dnsResolver = "1.1.1.1:53";
+    dnsProvider = "cloudflare";
+    credentialsFile = config.age.secrets.cloudflare-env.path;
+  };
+}
-- 
cgit v1.2.3