mirror of https://gitlab.crans.org/nounous/nixos
42 lines
883 B
Nix
42 lines
883 B
Nix
{ config, lib, ... }:
|
|
|
|
let
|
|
cfg = config.crans.services.acme;
|
|
|
|
inherit (lib) mkEnableOption mkIf;
|
|
in
|
|
|
|
{
|
|
options.crans.services.acme = {
|
|
enable = mkEnableOption "Activer les certificats ACME via let's encrypt.";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
age.secrets = {
|
|
acme-env.file = ../../secrets/acme/env.age;
|
|
};
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
|
|
defaults = {
|
|
email = "root@crans.org";
|
|
dnsPropagationCheck = false;
|
|
};
|
|
|
|
certs."all.crans.all" = {
|
|
domain = "*.crans.org";
|
|
dnsProvider = "rfc2136";
|
|
# Contient le serveur à contacter avec le protocole
|
|
# et le mot de passe
|
|
environmentFile = config.age.secrets.acme-env.path;
|
|
extraDomainNames = [
|
|
"*.crans.fr"
|
|
"*.crans.eu"
|
|
];
|
|
group = config.services.nginx.group;
|
|
};
|
|
};
|
|
};
|
|
}
|