nydragon/nix-da
1
Fork 0
Code Issues Pull requests Activity Actions 1

feat: agenix for ssl certificates

Browse source
This commit is contained in:
nydragon 2025-03-10 13:52:42 +01:00
parent fba057a78f
commit a7f8b8187c
Signed by: nydragon
SSH key fingerprint: SHA256:WcjW5NJPQ8Dx4uQDmoIlVPLWE27Od3fxoe0IUvuoPHE
4 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
hosts/raptus/default.nix
View file

@ -26,6 +26,7 @@ in
group = "rustypaste"; group = "rustypaste";
}; };
forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age; forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
acme.file = ../../secrets/acme.age;
}; };
boot.loader.grub = { boot.loader.grub = {
@ -97,6 +98,9 @@ in
acme = { acme = {
defaults.email = "admin@ccnlc.eu"; defaults.email = "admin@ccnlc.eu";
acceptTerms = true; acceptTerms = true;
dnsProvider = "ovh";
environmentFile = config.age.secrets.acme.path;
}; };
}; };

6
hosts/shan/default.nix
View file

@ -27,6 +27,7 @@
file = ../../secrets/freshrss-default-password.age; file = ../../secrets/freshrss-default-password.age;
owner = config.services.freshrss.user; owner = config.services.freshrss.user;
}; };
acme.file = ../../secrets/acme.age;
}; };
boot.loader.grub = { boot.loader.grub = {
@ -149,7 +150,7 @@
defaults = { defaults = {
email = "contact@ccnlc.eu"; email = "contact@ccnlc.eu";
dnsProvider = "ovh"; dnsProvider = "ovh";
environmentFile = "/run/secrets/ovh"; environmentFile = config.age.secrets.acme.path;
}; };
certs."ccnlc.eu" = { certs."ccnlc.eu" = {
@ -161,7 +162,7 @@
enable = true; enable = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
clientMaxBodySize = "100M"; clientMaxBodySize = "2000M";
virtualHosts = virtualHosts =
let let
mkVHLocal = mkVH "http://localhost"; mkVHLocal = mkVH "http://localhost";
@ -175,7 +176,6 @@
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection; proxy_set_header Connection $http_connection;
proxy_http_version 1.1; proxy_http_version 1.1;
client_max_body_size 2000M;
''; '';
}; };
useACMEHost = "ccnlc.eu"; useACMEHost = "ccnlc.eu";

BIN
secrets/acme.age Normal file
View file

Binary file not shown.

5
secrets/secrets.nix
View file

@ -24,4 +24,9 @@ in
shan shan
ny ny
]; ];
"acme.age".publicKeys = [
shan
raptus
ny
];
} }