upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-06-16 18:15:13 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: forgejo test

Browse source
This commit is contained in:
Nick 2025-01-18 18:48:37 -06:00
parent a4a6a568d5
commit 19131015db
1 changed files with 42 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

77
nixos/modules/services/acme.nix
View file

@ -2,17 +2,15 @@
config,
flake,
...
}: let
inherit
(flake.config.people)
}:
let
inherit (flake.config.people)
user0
;
inherit
(flake.config.people.users.${user0})
inherit (flake.config.people.users.${user0})
email
;
inherit
(flake.config.services)
inherit (flake.config.services)
instances
;
domain0 = instances.web.domains.url0;
@ -25,7 +23,8 @@
directory = instances.acme.paths.path0;
environmentFile = config.sops.secrets."dns/namecheap".path;
};
in {
in
{
security.acme = {
acceptTerms = true;
defaults = {
@ -33,7 +32,8 @@ in {
server = "https://acme-v02.api.letsencrypt.org/directory";
};
certs = builtins.listToAttrs (
(map (service: {
(map
(service: {
name = "${instanceName service}.${domain0}";
value = dnsConfig;
})
@ -44,25 +44,31 @@ in {
"ollama"
"syncthing"
"vaultwarden"
])
++ (map (service: {
]
)
++ (map
(service: {
name = "${instanceName service}.${domain1}";
value = dnsConfig;
})
[
"nextcloud"
"forgejo"
"matrix"
"owncast"
])
++ (map (service: {
]
)
++ (map
(service: {
name = "${instanceName service}.${domain3}";
value = dnsConfig;
})
[
"peertube"
])
++ (map (name: {
"forgejo"
]
)
++ (map
(name: {
name = name;
value = dnsConfig;
})
@ -70,26 +76,27 @@ in {
domain0
domain1
domain3
])
]
)
);
};
sops = let
sopsSecrets = [
"pass"
];
sopsPath = secret: {
path = "/var/lib/secrets/${instances.acme.name}/${dns}-${secret}";
owner = "root";
mode = "600";
sops =
let
sopsSecrets = [
"pass"
];
sopsPath = secret: {
path = "/var/lib/secrets/${instances.acme.name}/${dns}-${secret}";
owner = "root";
mode = "600";
};
in
{
secrets = builtins.listToAttrs (
map (secret: {
name = "dns/${dns}";
value = sopsPath secret;
}) sopsSecrets
);
};
in {
secrets = builtins.listToAttrs (
map
(secret: {
name = "dns/${dns}";
value = sopsPath secret;
})
sopsSecrets
);
};
}