migrate to clan

2025-05-16 15:46:47 +02:00
parent f817ba1405
commit f1ec59c3af
60 changed files with 225 additions and 391 deletions
--- a/machines/genepi/acme.nix
+++ b/machines/genepi/acme.nix
@@ -0,0 +1,21 @@
+{ config, ... }:
+{
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "admin@rpqt.fr";
+  };
+
+  age.secrets.gandi.file = ../../secrets/gandi.age;
+
+  security.acme = {
+    certs."home.rpqt.fr" = {
+      group = config.services.nginx.group;
+
+      domain = "home.rpqt.fr";
+      extraDomainNames = [ "*.home.rpqt.fr" ];
+      dnsProvider = "gandiv5";
+      dnsPropagationCheck = true;
+      environmentFile = config.age.secrets.gandi.path;
+    };
+  };
+}