From 65e8baabbac36964af2014f8dae1ca6cec274f7c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kha=C3=AFs=20COLIN?= Date: Thu, 22 Aug 2024 16:50:23 +0000 Subject: [PATCH] chore: put acme configuration in own file --- acme.nix | 16 ++++++++++++++++ configuration.nix | 1 + sourcehut.nix | 13 ------------- 3 files changed, 17 insertions(+), 13 deletions(-) create mode 100644 acme.nix diff --git a/acme.nix b/acme.nix new file mode 100644 index 0000000..b2d6e86 --- /dev/null +++ b/acme.nix @@ -0,0 +1,16 @@ +{ base-domain, ... }: +{ + security.acme = { + certs.${base-domain}.extraDomainNames = [ + "${base-domain}" + "sourcehut.${base-domain}" + "meta.sourcehut.${base-domain}" + "git.sourcehut.${base-domain}" + ]; + acceptTerms = true; + defaults = { + email = "khais.colin+letsencrypt@gmail.com"; + dnsProvider = "namecheap"; + }; + }; +} diff --git a/configuration.nix b/configuration.nix index 5ee906f..68f3d34 100644 --- a/configuration.nix +++ b/configuration.nix @@ -3,6 +3,7 @@ imports = [ ./hardware-configuration.nix ./firewall.nix + (import ./acme.nix { base-domain = "005540.xyz"; }) ./userprogs.nix ./sourcehut.nix ]; diff --git a/sourcehut.nix b/sourcehut.nix index 501e716..8d290fd 100644 --- a/sourcehut.nix +++ b/sourcehut.nix @@ -43,19 +43,6 @@ in }; }; - security.acme = { - certs.${base-domain}.extraDomainNames = [ - "${fqdn}" - "meta.${fqdn}" - "git.${fqdn}" - ]; - acceptTerms = true; - defaults = { - email = "khais.colin+letsencrypt@gmail.com"; - dnsProvider = "namecheap"; - }; - }; - services.nginx = { enable = true; recommendedTlsSettings = true;