nixos/acme: actually act as a mixin

1 files changed, 5 insertions, 44 deletions

diff --git a/modules/nixos/mixins/acme.nix b/modules/nixos/mixins/acme.nix
index 3b49caf..7c39eed 100644
--- a/modules/nixos/mixins/acme.nix
+++ b/modules/nixos/mixins/acme.nix
@@ -1,52 +1,13 @@
 {
-  config,
   lib,
-  secretsDir,
   ...
 }:
-let
-  cfg = config.mixins.acme;
-in
-{
-  options.mixins.acme = {
-    enable = lib.mkEnableOption "ACME mixin";
-
-    manageSecrets = lib.mkEnableOption "automatic management of secrets" // {
-      default = config.traits.secrets.enable;
-      defaultText = lib.literalExpression "config.traits.secrets.enable";
-    };
 
-    useDns = lib.mkEnableOption "the use of Cloudflare to obtain certs" // {
-      default = true;
+{
+  security.acme = {
+    acceptTerms = lib.mkDefault true;
+    defaults = {
+      email = lib.mkDefault "[email protected]";
     };
   };
-
-  config = lib.mkIf cfg.enable (
-    lib.mkMerge [
-      {
-        security.acme = {
-          acceptTerms = true;
-          defaults = {
-            email = "[email protected]";
-          };
-        };
-      }
-
-      (lib.mkIf cfg.useDns {
-        security.acme.defaults = {
-          dnsProvider = "cloudflare";
-        };
-      })
-
-      (lib.mkIf cfg.manageSecrets {
-        age.secrets = {
-          cloudflareApiKey.file = secretsDir + "/cloudflareApiKey.age";
-        };
-
-        security.acme.defaults = {
-          credentialsFile = config.age.secrets.cloudflareApiKey.path;
-        };
-      })
-    ]
-  );
 }