diff options
Diffstat (limited to 'modules/nixos/server')
| -rw-r--r-- | modules/nixos/server/acme.nix | 25 | ||||
| -rw-r--r-- | modules/nixos/server/default.nix | 43 | ||||
| -rw-r--r-- | modules/nixos/server/secrets.nix | 21 |
3 files changed, 0 insertions, 89 deletions
diff --git a/modules/nixos/server/acme.nix b/modules/nixos/server/acme.nix deleted file mode 100644 index a08c8ae..0000000 --- a/modules/nixos/server/acme.nix +++ /dev/null @@ -1,25 +0,0 @@ -{ - config, - lib, - secretsDir, - ... -}: let - cfg = config.server.acme; -in { - options.server.acme.enable = lib.mkEnableOption "ACME support"; - - config = lib.mkIf cfg.enable { - age.secrets = { - cloudflareApiKey.file = secretsDir + "/cloudflareApiKey.age"; - }; - - security.acme = { - acceptTerms = true; - defaults = { - email = "[email protected]"; - dnsProvider = "cloudflare"; - credentialsFile = config.age.secrets.cloudflareApiKey.path; - }; - }; - }; -} diff --git a/modules/nixos/server/default.nix b/modules/nixos/server/default.nix deleted file mode 100644 index baf05f9..0000000 --- a/modules/nixos/server/default.nix +++ /dev/null @@ -1,43 +0,0 @@ -{ - config, - lib, - pkgs, - inputs, - ... -}: let - cfg = config.server; -in { - options.server.enable = lib.mkEnableOption "base server settings"; - - imports = [ - ./acme.nix - ./secrets.nix - ]; - - config = lib.mkIf cfg.enable { - _module.args.unstable = inputs.nixpkgs.legacyPackages.${pkgs.stdenv.hostPlatform.system}; - - boot = { - tmp.cleanOnBoot = lib.mkDefault true; - kernelPackages = lib.mkDefault pkgs.linuxPackages_hardened; - }; - environment.etc."nix/inputs/nixpkgs".source = inputs.nixpkgs-stable.outPath; - - documentation = { - enable = false; - man.enable = false; - }; - - environment.defaultPackages = lib.mkForce []; - - nix = { - gc = { - dates = "*-*-1,5,9,13,17,21,25,29 00:00:00"; - options = "-d --delete-older-than 2d"; - }; - - registry.n.flake = inputs.nixpkgs-stable; - settings.allowed-users = [config.networking.hostName]; - }; - }; -} diff --git a/modules/nixos/server/secrets.nix b/modules/nixos/server/secrets.nix deleted file mode 100644 index 0f38995..0000000 --- a/modules/nixos/server/secrets.nix +++ /dev/null @@ -1,21 +0,0 @@ -{ - config, - lib, - secretsDir, - ... -}: let - cfg = config.server.secrets; -in { - options.server.secrets.enable = lib.mkEnableOption "secrets management"; - - config = lib.mkIf cfg.enable { - age = { - identityPaths = ["/etc/age/key"]; - - secrets = { - rootPassword.file = secretsDir + "/rootPassword.age"; - userPassword.file = secretsDir + "/userPassword.age"; - }; - }; - }; -} |
