feat: added nextcloud and opencloud to eris

modules/nixos/services/acme/acmeCeres/default.nix

@@ -39,12 +39,10 @@ in
           instances.glance.name
           instances.jellyfin.name
           instances.minecraft.name
-          instances.nextcloud.name
           instances.ollama.name
           instances.searx.name
           instances.syncthing.name
           instances.vaultwarden.name
-          instances.opencloud.name
           instances.prompter.name
           instances.comfyui.name
           instances.firefly-iii.name

modules/nixos/services/acme/acmeEris/default.nix

@@ -0,0 +1,69 @@
+{
+  config,
+  flake,
+  ...
+}:
+let
+  inherit (flake.config.people) user0;
+  inherit (flake.config.people.users.${user0}) email;
+  inherit (flake.config.services) instances;
+
+  domain0 = instances.web.domains.url0;
+  dns0 = instances.web.dns.provider0;
+  dns0Path = "dns/${dns0}";
+  instanceName = service: (instances.${service}.subdomain);
+
+  dnsConfig = provider: dns: {
+    dnsProvider = dns;
+    directory = "/var/lib/acme";
+    environmentFile = config.sops.secrets.${provider}.path;
+  };
+in
+{
+  security.acme = {
+    acceptTerms = true;
+    defaults = {
+      email = email.address0;
+      server = "https://acme-v02.api.letsencrypt.org/directory";
+    };
+    certs = builtins.listToAttrs (
+      (map
+        (service: {
+          name = "${instanceName service}.${domain0}";
+          value = dnsConfig dns0Path dns0;
+        })
+        [
+          instances.nextcloud.name
+          instances.opencloud.name
+        ]
+      )
+    );
+  };
+  sops =
+    let
+      dnsList = [
+        dns0
+      ];
+      secretList = [
+        "pass"
+      ];
+      sopsPath = secret: dns: {
+        path = "/var/lib/secrets/${instances.acme.name}/${dns}-${secret}";
+        owner = "root";
+        mode = "600";
+      };
+    in
+    {
+      secrets = builtins.listToAttrs (
+        builtins.concatLists (
+          map (
+            dns:
+            map (secret: {
+              name = "dns/${dns}";
+              value = sopsPath secret dns;
+            }) secretList
+          ) dnsList
+        )
+      );
+    };
+}