From eb80f8089c4d0d0e1e70f6aa00a479a0583b5a04 Mon Sep 17 00:00:00 2001
From: Romain Paquet <rpqt@rpqt.fr>
Date: Tue, 24 Feb 2026 17:53:46 +0100
Subject: [PATCH] clan: migrate certificate service to pki

---
 clan/network.nix | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

diff --git a/clan/network.nix b/clan/network.nix
index 8b66dc0..71c8429 100644
--- a/clan/network.nix
+++ b/clan/network.nix
@@ -35,16 +35,9 @@
     };
   };
 
-  clan.inventory.instances.certificates = {
-    module.name = "certificates";
-    module.input = "clan-core";
-
-    roles.ca.machines.verbena = {
-      settings.acmeEmail = "admin@rpqt.fr";
-      settings.tlds = [ "val" ];
-    };
+  clan.inventory.instances.pki = {
+    module.name = "pki";
     roles.default.tags.all = { };
-    roles.default.settings.acmeEmail = "admin@rpqt.fr";
   };
 
   # Temporarily patched version of clan-core/coredns for AAAA records support