kyra(hardening): per-service acme setup

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
s0me1newithhand7s 2026-05-03 15:45:42 +03:00
parent c563897f02
commit a8c7b87791

View file

@ -3,14 +3,20 @@
acme = {
acceptTerms = true;
defaults = {
email = "litvinovb0@gmail.com";
email = "me@hand7s.org";
};
certs = {
"hand7s.org" = {
dnsProvider = "cloudflare";
credentialsFile = config.sops.templates."acme.env".path;
group = "sing-box";
environmentFile = config.sops.templates."acme.env".path;
group = "mihomo";
};
"ntp.hand7s.org" = {
dnsProvider = "cloudflare";
environmentFile = config.sops.templates."acme.env".path;
group = "ntpd-rs";
};
};
};