reNixos/kyra/security/acme.nix
s0me1newithhand7s a8c7b87791 kyra(hardening): per-service acme setup
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:06:55 +03:00

24 lines
516 B
Nix

{config, ...}: {
security = {
acme = {
acceptTerms = true;
defaults = {
email = "me@hand7s.org";
};
certs = {
"hand7s.org" = {
dnsProvider = "cloudflare";
environmentFile = config.sops.templates."acme.env".path;
group = "mihomo";
};
"ntp.hand7s.org" = {
dnsProvider = "cloudflare";
environmentFile = config.sops.templates."acme.env".path;
group = "ntpd-rs";
};
};
};
};
}