summaryrefslogtreecommitdiff
path: root/modules/nixos/traits/acme.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos/traits/acme.nix')
-rw-r--r--modules/nixos/traits/acme.nix46
1 files changed, 0 insertions, 46 deletions
diff --git a/modules/nixos/traits/acme.nix b/modules/nixos/traits/acme.nix
deleted file mode 100644
index 0d42f6a..0000000
--- a/modules/nixos/traits/acme.nix
+++ /dev/null
@@ -1,46 +0,0 @@
-{
- config,
- lib,
- secretsDir,
- ...
-}: let
- cfg = config.traits.acme;
-in {
- options.traits.acme = {
- enable = lib.mkEnableOption "ACME support";
-
- manageSecrets =
- lib.mkEnableOption "automatic secrets management"
- // {
- default = config.traits.secrets.enable;
- };
-
- useDns = lib.mkEnableOption "the usage of dns to get certs" // {default = true;};
- };
-
- config = lib.mkIf cfg.enable (
- lib.mkMerge [
- {
- security.acme = {
- acceptTerms = true;
- defaults =
- {
- email = "[email protected]";
- }
- // lib.optionalAttrs cfg.useDns {
- dnsProvider = "cloudflare";
- }
- // lib.optionalAttrs cfg.manageSecrets {
- credentialsFile = config.age.secrets.cloudflareApiKey.path;
- };
- };
- }
-
- (lib.mkIf cfg.manageSecrets {
- age.secrets = {
- cloudflareApiKey.file = secretsDir + "/cloudflareApiKey.age";
- };
- })
- ]
- );
-}