copy nb configuration and modules

2023-07-12 16:13:10 +02:00
parent 1af70a3095
commit 127eab91d5
114 changed files with 9070 additions and 0 deletions
--- a/utils/modules/lego/lego.nix
+++ b/utils/modules/lego/lego.nix
@@ -0,0 +1,16 @@
+{ config, ... }:
+
+{
+  sops.secrets.lego-credentials = {
+    sopsFile = ./secrets.yaml;
+  };
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "admin+acme@cloonar.com";
+  security.acme.defaults = {
+    dnsProvider = "hetzner";
+    credentialsFile = config.sops.secrets.lego-credentials.path;
+    # We don't need to wait for propagation since this is a local DNS server
+    dnsPropagationCheck = true;
+  };
+}