haproxy compat for acme, add go major mode to doom
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
This commit is contained in:
34
systems/palatine-hill/acme.nix
Normal file
34
systems/palatine-hill/acme.nix
Normal file
@ -0,0 +1,34 @@
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
|
||||
{
|
||||
security.acme = {
|
||||
acceptTerms = true;
|
||||
defaults.email = "aliceghuston@gmail.com";
|
||||
certs."nayeonie.com" = {
|
||||
dnsProvider = "bunny";
|
||||
environmentFile = config.sops.secrets."acme/bunny".path;
|
||||
dnsPropagationCheck = false;
|
||||
group = "haproxy";
|
||||
extraDomainNames = [
|
||||
# "*.nayeonie.com"
|
||||
# "alicehuston.xyz"
|
||||
# "*.alicehuston.xyz"
|
||||
];
|
||||
};
|
||||
};
|
||||
security.acme.defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
||||
systemd.services."acme-nayeonie.com".serviceConfig = {
|
||||
Environment = [ ''"PATH=/ZFS/ZFS-primary/backups/lego/dist:$PATH"'' ];
|
||||
};
|
||||
|
||||
sops.secrets = {
|
||||
"acme/bunny" = {
|
||||
owner = "root";
|
||||
};
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user