rpqt/flocon
rpqt/flocon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

remove gandi acme

Browse source
This commit is contained in:
Romain Paquet 2026-01-05 21:42:17 +01:00
parent d162591696
commit c9953d269b
2 changed files with 26 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

44
modules/acme-home.nix
View file

@ -1,26 +1,34 @@
{ config, lib, ... }:
{ {
imports = [ config,
./gandi.nix lib,
]; pkgs,
...
}:
{
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults.email = lib.mkDefault "admin@rpqt.fr"; defaults.email = lib.mkDefault "admin@rpqt.fr";
}; };
security.acme = { # security.acme = {
certs."home.rpqt.fr" = { # certs."home.rpqt.fr" = {
group = config.services.nginx.group; # group = config.services.nginx.group;
domain = "home.rpqt.fr"; # domain = "home.rpqt.fr";
extraDomainNames = [ "*.home.rpqt.fr" ]; # extraDomainNames = [ "*.home.rpqt.fr" ];
dnsProvider = "gandiv5"; # dnsProvider = "rfc2136";
dnsPropagationCheck = true; # dnsPropagationCheck = true;
environmentFile = config.clan.core.vars.generators.gandi.files.gandi-env.path; # credentialFiles = {
email = "admin@rpqt.fr"; # RFC2136_TSIG_SECRET_FILE = config.clan.core.vars.generators.coredns.files.tsig-key.path;
dnsResolver = "1.1.1.1:53"; # };
}; # environmentFile = pkgs.writeFile ''
}; # RFC2136_NAMESERVER=fd28:387a:90:c400::1
# '';
# email = "admin@rpqt.fr";
# dnsResolver = "1.1.1.1:53";
# server = "https://acme-staging-v02.api.letsencrypt.org/directory"; # TODO: use production api
# };
# };
clan.core.vars.generators.gandi.files.gandi-env.owner = "acme"; # clan.core.vars.generators.coredns.files.tsig-key.group = "acme";
# clan.core.vars.generators.coredns.files.tsig-key.mode = "0440";
} }

15
modules/gandi.nix
View file

@ -1,15 +0,0 @@
{
clan.core.vars.generators.gandi = {
prompts.gandi-token = {
description = "gandi access token";
type = "hidden";
};
files.gandi-env = {
secret = true;
};
script = ''
printf %s "GANDIV5_PERSONAL_ACCESS_TOKEN=" >> $out/gandi-env
cat $prompts/gandi-token >> $out/gandi-env
'';
};
}