summaryrefslogtreecommitdiff
path: root/modules/nixos/server/acme.nix
diff options
context:
space:
mode:
authorseth <[email protected]>2024-02-02 14:40:21 -0500
committerseth <[email protected]>2024-02-02 14:40:21 -0500
commit9758b8236dcaafb958e6ef4f634d201af0bea80b (patch)
tree5c5e2ad317d6bef10a26487c5aa2e7887e18f68c /modules/nixos/server/acme.nix
parentb405f4750738a0850cf220f7bade601a8c6355b5 (diff)
modules/nixos+darwin: make everything an actual module again
Diffstat (limited to 'modules/nixos/server/acme.nix')
-rw-r--r--modules/nixos/server/acme.nix27
1 files changed, 17 insertions, 10 deletions
diff --git a/modules/nixos/server/acme.nix b/modules/nixos/server/acme.nix
index edb499c..a08c8ae 100644
--- a/modules/nixos/server/acme.nix
+++ b/modules/nixos/server/acme.nix
@@ -1,18 +1,25 @@
{
config,
+ lib,
secretsDir,
...
-}: {
- age.secrets = {
- cloudflareApiKey.file = secretsDir + "/cloudflareApiKey.age";
- };
+}: let
+ cfg = config.server.acme;
+in {
+ options.server.acme.enable = lib.mkEnableOption "ACME support";
+
+ config = lib.mkIf cfg.enable {
+ age.secrets = {
+ cloudflareApiKey.file = secretsDir + "/cloudflareApiKey.age";
+ };
- security.acme = {
- acceptTerms = true;
- defaults = {
- email = "[email protected]";
- dnsProvider = "cloudflare";
- credentialsFile = config.age.secrets.cloudflareApiKey.path;
+ security.acme = {
+ acceptTerms = true;
+ defaults = {
+ email = "[email protected]";
+ dnsProvider = "cloudflare";
+ credentialsFile = config.age.secrets.cloudflareApiKey.path;
+ };
};
};
}