albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Updates

Browse source
This commit is contained in:
albert 2024-08-05 21:28:10 +09:00
parent 0ea6dbbee8
commit ef2c7ecf1c
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
nixos/hosts/osaka-linode-01/firewall.nix
View file

@ -53,18 +53,19 @@
sops.secrets."cloudflare/api_key" = { sops.secrets."cloudflare/api_key" = {
owner = "haproxy"; owner = "haproxy";
sopsFile = ../../../secrets/cloufdlare.yaml; sopsFile = ../../../secrets/cloudflare.yaml;
}; };
security.acme = { security.acme = {
enable = true; acceptTerms = true;
defaults = { defaults = {
keyType = "pem"; keyType = "pem";
group = "haproxy"; group = "haproxy";
reloadServices = [ "haproxy" ]; reloadServices = [ "haproxy" ];
email = "albert@sysctl.io"; email = "albert@sysctl.io";
credentialFiles = { dnsProvider = "cloudflare";
CF_Token = "/var/run/secrets/cloudflare/api_key" credentialFiles = {
CLOUDFLARE_API_KEY_FILE = "/var/run/secrets/cloudflare/api_key";
}; };
}; };
certs = { certs = {