kitchen/rice
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Compare commits

base: kitchen:e5725761ef8d173f2dd4c390ae75732a00157105
Branches Tags
kitchen:main
kitchen:disko-alice
..
compare: kitchen:6c4a46e2890adbc5d9a0f8cffce7275e91e2a136
Branches Tags
kitchen:disko-alice
kitchen:main

2 commits
e5725761ef ... 6c4a46e289

Author SHA1 Message Date
buffet
6c4a46e289 Merge pull request 'feat: use hetzner dns to get wildcard cert from lets encrypt' (#5) from wildcard-certificate into main
All checks were successful
/ check (push) Successful in 2m28s
Details 
Reviewed-on: #5
 2024-05-22 06:44:12 +00:00
buffet
d6eb3aa28b feat: use hetzner dns to get wildcard cert from lets encrypt
All checks were successful
/ check (pull_request) Successful in 2m23s
Details
2024-05-22 08:38:12 +02:00
4 changed files with 15 additions and 8 deletions
Show stats Expand all files Collapse all files

14
hosts/ami/acme.nix
View file

@ -1,14 +1,14 @@
_: { {config, ...}: {
age.secrets.hetzner-dns.file = ../../secrets/hetzner-dns.age;
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults.email = "acme@buffet.sh"; defaults.email = "acme@buffet.sh";
certs."buffet.sh" = { certs."buffet.sh" = {
extraDomainNames = [ domain = "*.buffet.sh";
"404.buffet.sh" group = "nginx";
"bitwarden.buffet.sh" dnsProvider = "hetzner";
"rap.buffet.sh" credentialsFile = config.age.secrets.hetzner-dns.path;
"buffets.kitchen"
];
}; };
}; };
} }

2
hosts/ami/website.nix
View file

@ -10,7 +10,7 @@
recommendedTlsSettings = true; recommendedTlsSettings = true;
virtualHosts."buffet.sh" = { virtualHosts."buffet.sh" = {
enableACME = true; useACMEHost = "buffet.sh";
forceSSL = true; forceSSL = true;
root = "${website}"; root = "${website}";
}; };

1
secrets.nix
View file

@ -3,6 +3,7 @@ let
in { in {
"secrets/bitwarden.age".publicKeys = [buffet]; "secrets/bitwarden.age".publicKeys = [buffet];
"secrets/borgpassword.age".publicKeys = [buffet]; "secrets/borgpassword.age".publicKeys = [buffet];
"secrets/hetzner-dns.age".publicKeys = [buffet];
"secrets/kitchen-runner-token.age".publicKeys = [buffet]; "secrets/kitchen-runner-token.age".publicKeys = [buffet];
"secrets/msmtppassword.age".publicKeys = [buffet]; "secrets/msmtppassword.age".publicKeys = [buffet];
} }

6
secrets/hetzner-dns.age Normal file
View file

@ -0,0 +1,6 @@
age-encryption.org/v1
-> ssh-ed25519 zRvPWg 3ihM8FBFjebzTErFkqn6Byfw2D/W45gkwVczLm0I7Tg
uV3GJXI9zKT1q4/Z3hF1eE8wN5fnDFMyJOH/3bcq+Vk
--- jcd587gk1OjweyDm7teUUt+6u3A7JXIX0aBEjBJPOBg
÷Úc;y§_taîŽíiÀ*­˜ÕþÁdKù^à÷xÚH+:=1ŒÙo)”
…¦C„wât&d©uÎ^ŽÔniÅÎzF@