summaryrefslogtreecommitdiff
path: root/env/acme
diff options
context:
space:
mode:
authorAlejandro Soto <alejandro@34project.org>2024-07-14 17:53:13 -0600
committerAlejandro Soto <alejandro@34project.org>2024-07-15 09:34:00 -0600
commit02abf4ed0131237c25e0a10db50fa4c41a902a50 (patch)
tree20904894fc0952806e341cdaff5941e81b3ce51c /env/acme
parent08e746700341dda3e3bdf704332fc3c07053d3e7 (diff)
sys: final merge of dmz, hv into sys
Diffstat (limited to 'env/acme')
-rw-r--r--env/acme/default.nix48
-rw-r--r--env/acme/domains.nix12
2 files changed, 0 insertions, 60 deletions
diff --git a/env/acme/default.nix b/env/acme/default.nix
deleted file mode 100644
index 9b3db80..0000000
--- a/env/acme/default.nix
+++ /dev/null
@@ -1,48 +0,0 @@
-{ config, lib, ... }:
-with lib; let
- cfg = config.local;
-in
-{
- options.local = with types; {
- domains = mkOption {
- type = attrsOf (attrsOf str);
- };
-
- certs = mapAttrs
- (_: _: {
- enable = mkEnableOption "TLS cert for ${name}";
- })
- cfg.domains;
- };
-
- config = {
- security.acme = {
- acceptTerms = true;
-
- defaults = {
- email = "security@${config.networking.domain}";
- renewInterval = "weekly";
-
- webroot =
- if config.security.acme.defaults.dnsProvider == null
- then "/var/lib/acme/acme-challenge"
- else null;
- };
-
- certs =
- let
- domainSort = sort (a: b: splitString "." a < splitString "." b);
-
- certConfig = domains: {
- domain = domains.main;
- extraDomainNames = domainSort (attrValues (filterAttrs (k: _: k != "main") domains));
- };
- in
- mapAttrs'
- (_: value: nameValuePair value.main (certConfig value))
- (filterAttrs (name: _: cfg.certs.${name}.enable) cfg.domains);
- };
-
- local.domains = import ./domains.nix;
- };
-}
diff --git a/env/acme/domains.nix b/env/acme/domains.nix
deleted file mode 100644
index 0412391..0000000
--- a/env/acme/domains.nix
+++ /dev/null
@@ -1,12 +0,0 @@
-{
- host = {
- main = "34project.org";
- www = "www.34project.org";
- mail = "mail.34project.org";
- };
-
- smtp.main = "smtp.34project.org";
- imap.main = "imap.34project.org";
-
- git.main = "git.cluster451.org";
-}