kat/nixfiles
1
0
Fork 0
mirror of https://github.com/kittywitch/nixfiles.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity

[MATRIX, WEB SERVERS] Improvements, DNS-01

Browse source
This commit is contained in:
Kat Inskip 2023-04-25 16:33:32 -07:00
parent a1f1dee6a1
commit e642b3879c
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
13 changed files with 191 additions and 94 deletions
Download patch file Download diff file Expand all files Collapse all files

18
nixos/roles/web-server/scalpel.nix Normal file
View file

@ -0,0 +1,18 @@
{
lib,
config,
pkgs,
prev,
...
}: {
scalpel.trafos."credentials_file" = {
source = "/etc/ssl/credentials_template";
matchers."CLOUDFLARE_EMAIL".secret = config.sops.secrets.cloudflare_email.path;
matchers."CLOUDFLARE_TOKEN".secret = config.sops.secrets.cloudflare_token.path;
owner = "acme";
group = "acme";
mode = "0440";
};
security.acme.defaults.credentialsFile = config.scalpel.trafos."credentials_file".destination;
}