mirror of
https://github.com/kittywitch/nixfiles.git
synced 2026-02-09 04:19:19 -08:00
12 lines
435 B
Nix
12 lines
435 B
Nix
{config, ...}: {
|
|
scalpel.trafos."credentials_file" = {
|
|
source = "/etc/ssl/credentials_template";
|
|
matchers."CLOUDFLARE_EMAIL".secret = config.sops.secrets.cloudflare_email.path;
|
|
matchers."CLOUDFLARE_TOKEN".secret = config.sops.secrets.cloudflare_token.path;
|
|
owner = "acme";
|
|
group = "acme";
|
|
mode = "0440";
|
|
};
|
|
|
|
security.acme.defaults.credentialsFile = config.scalpel.trafos."credentials_file".destination;
|
|
}
|