mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

feat: update credentialsFile to credentialFiles in acme

Browse source
This commit is contained in:
oddlama 2023-12-17 20:56:16 +01:00
parent a53c4524bb
commit 6f1c20a718
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
4 changed files with 22 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/sentinel/acme.nix
View file

@ -1,8 +1,14 @@
{config, ...}: let
inherit (config.repo.secrets.local) acme;
in {
age.secrets.acme-credentials = {
rekeyFile = ./secrets/acme-credentials.age;
age.secrets.acme-cloudflare-dns-token = {
rekeyFile = ./secrets/acme-cloudflare-dns-token.age;
mode = "440";
group = "acme";
};
age.secrets.acme-cloudflare-zone-token = {
rekeyFile = ./secrets/acme-cloudflare-zone-token.age;
mode = "440";
group = "acme";
};
@ -11,7 +17,10 @@ in {
acceptTerms = true;
defaults = {
inherit (acme) email;
credentialsFile = config.age.secrets.acme-credentials.path;
credentialFiles = {
CF_DNS_API_TOKEN_FILE = config.age.secrets.acme-cloudflare-dns-token.path;
CF_ZONE_API_TOKEN_FILE = config.age.secrets.acme-cloudflare-zone-token.path;
};
dnsProvider = "cloudflare";
dnsPropagationCheck = true;
reloadServices = ["nginx"];