kitchen/rice
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Compare commits

base: kitchen:6c4a46e2890adbc5d9a0f8cffce7275e91e2a136
Branches Tags
kitchen:main
kitchen:disko-alice
..
compare: kitchen:e5725761ef8d173f2dd4c390ae75732a00157105
Branches Tags
kitchen:disko-alice
kitchen:main

No commits in common. "6c4a46e2890adbc5d9a0f8cffce7275e91e2a136" and "e5725761ef8d173f2dd4c390ae75732a00157105" have entirely different histories.
6c4a46e289 ... e5725761ef

4 changed files with 8 additions and 15 deletions
Show stats Expand all files Collapse all files

14
hosts/ami/acme.nix
View file

@ -1,14 +1,14 @@
{config, ...}: { _: {
age.secrets.hetzner-dns.file = ../../secrets/hetzner-dns.age;
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults.email = "acme@buffet.sh"; defaults.email = "acme@buffet.sh";
certs."buffet.sh" = { certs."buffet.sh" = {
domain = "*.buffet.sh"; extraDomainNames = [
group = "nginx"; "404.buffet.sh"
dnsProvider = "hetzner"; "bitwarden.buffet.sh"
credentialsFile = config.age.secrets.hetzner-dns.path; "rap.buffet.sh"
"buffets.kitchen"
];
}; };
}; };
} }

2
hosts/ami/website.nix
View file

@ -10,7 +10,7 @@
recommendedTlsSettings = true; recommendedTlsSettings = true;
virtualHosts."buffet.sh" = { virtualHosts."buffet.sh" = {
useACMEHost = "buffet.sh"; enableACME = true;
forceSSL = true; forceSSL = true;
root = "${website}"; root = "${website}";
}; };

1
secrets.nix
View file

@ -3,7 +3,6 @@ let
in { in {
"secrets/bitwarden.age".publicKeys = [buffet]; "secrets/bitwarden.age".publicKeys = [buffet];
"secrets/borgpassword.age".publicKeys = [buffet]; "secrets/borgpassword.age".publicKeys = [buffet];
"secrets/hetzner-dns.age".publicKeys = [buffet];
"secrets/kitchen-runner-token.age".publicKeys = [buffet]; "secrets/kitchen-runner-token.age".publicKeys = [buffet];
"secrets/msmtppassword.age".publicKeys = [buffet]; "secrets/msmtppassword.age".publicKeys = [buffet];
} }

6
secrets/hetzner-dns.age
View file

@ -1,6 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 zRvPWg 3ihM8FBFjebzTErFkqn6Byfw2D/W45gkwVczLm0I7Tg
uV3GJXI9zKT1q4/Z3hF1eE8wN5fnDFMyJOH/3bcq+Vk
--- jcd587gk1OjweyDm7teUUt+6u3A7JXIX0aBEjBJPOBg
÷Úc;y§_taîŽíiÀ*­˜ÕþÁdKù^à÷xÚH+:=1ŒÙo)”
…¦C„wât&d©uÎ^ŽÔniÅÎzF@