sys/pki: initial commit, declares mail-fullchain-crl

1 files changed, 24 insertions, 0 deletions

diff --git a/sys/pki/chains/default.nix b/sys/pki/chains/default.nix
new file mode 100644
index 0000000..5bbde43
--- /dev/null
+++ b/sys/pki/chains/default.nix
@@ -0,0 +1,24 @@
+{ lib, ... }:
+with lib; {
+  options.local.pki.chains =
+    let
+      chainType = mkOption {
+        type = types.path;
+        readOnly = true;
+      };
+    in
+    {
+      mail-fullchain-crl = chainType;
+    };
+
+  config.local.pki.chains = {
+    # Orden de concatenación de mail-fullchain-crl.crt:
+    # - Issuing CA cert
+    # - Issuing CA CRL
+    # - Intermediate CA cert
+    # - Intermediate CA CRL
+    # - Root CA cert
+    # - Root CA CRL
+    mail-fullchain-crl = ./mail-fullchain-crl.crt;
+  };
+}