summaryrefslogtreecommitdiff
path: root/modules/nixos/server/mixins/acme.nix
diff options
context:
space:
mode:
authorseth <[email protected]>2024-10-27 20:12:19 -0400
committerGitHub <[email protected]>2024-10-28 00:12:19 +0000
commit5ec7ee21e036f7bc1cbdec714271c619cb3fdb3d (patch)
tree3277d8ba68ca466e68c58a8373063010db392d2e /modules/nixos/server/mixins/acme.nix
parent75ec48c5f7dd7877f2294b86764b1fdadc6b7e88 (diff)
modules: restructure (#487)
* seth: remove unused pkgs * modules: restructure from archetypes back to profiles make less actual modules for everything use lib.mkDefault like it's supposed to move mixins out of server * nixos/resolved: use modern options
Diffstat (limited to 'modules/nixos/server/mixins/acme.nix')
-rw-r--r--modules/nixos/server/mixins/acme.nix52
1 files changed, 0 insertions, 52 deletions
diff --git a/modules/nixos/server/mixins/acme.nix b/modules/nixos/server/mixins/acme.nix
deleted file mode 100644
index 39166f2..0000000
--- a/modules/nixos/server/mixins/acme.nix
+++ /dev/null
@@ -1,52 +0,0 @@
-{
- config,
- lib,
- secretsDir,
- ...
-}:
-let
- cfg = config.server.mixins.acme;
-in
-{
- options.server.mixins.acme = {
- enable = lib.mkEnableOption "ACME mixin";
-
- manageSecrets = lib.mkEnableOption "automatic management of secrets" // {
- default = config.traits.secrets.enable;
- defaultText = lib.literalExpression "config.traits.secrets.enable";
- };
-
- useDns = lib.mkEnableOption "the use of Cloudflare to obtain certs" // {
- default = true;
- };
- };
-
- config = lib.mkIf cfg.enable (
- lib.mkMerge [
- {
- security.acme = {
- acceptTerms = true;
- defaults = {
- email = "[email protected]";
- };
- };
- }
-
- (lib.mkIf cfg.useDns {
- security.acme.defaults = {
- dnsProvider = "cloudflare";
- };
- })
-
- (lib.mkIf cfg.manageSecrets {
- age.secrets = {
- cloudflareApiKey.file = secretsDir + "/cloudflareApiKey.age";
- };
-
- security.acme.defaults = {
- credentialsFile = config.age.secrets.cloudflareApiKey.path;
- };
- })
- ]
- );
-}