mirror of
https://github.com/kittywitch/nixfiles.git
synced 2026-02-09 04:19:19 -08:00
18 lines
464 B
Nix
18 lines
464 B
Nix
{
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
prev,
|
|
...
|
|
}: {
|
|
scalpel.trafos."credentials_file" = {
|
|
source = "/etc/ssl/credentials_template";
|
|
matchers."CLOUDFLARE_EMAIL".secret = config.sops.secrets.cloudflare_email.path;
|
|
matchers."CLOUDFLARE_TOKEN".secret = config.sops.secrets.cloudflare_token.path;
|
|
owner = "acme";
|
|
group = "acme";
|
|
mode = "0440";
|
|
};
|
|
|
|
security.acme.defaults.credentialsFile = config.scalpel.trafos."credentials_file".destination;
|
|
}
|