tlaternet/tlaternet-server
1
0
Fork 0
Code Issues10 Pull requests Releases Activity

feat(acme): Switch to porkbun

Browse source
This commit is contained in:
Tristan Daniël Maat 2025-02-01 18:16:52 +08:00
parent 68450870cf
commit 78c81a1028
Signed by: tlater
GPG key ID: 49670FD774E43268
4 changed files with 30 additions and 15 deletions
configuration
nginx.nixsops.nix

13
configuration/nginx.nix
View file

@ -47,10 +47,17 @@
acceptTerms = true;
certs."tlater.net" = {
extraDomainNames = [ "*.tlater.net" ];
dnsProvider = "hetzner";
extraDomainNames = [
"*.tlater.net"
"tlater.com"
"*.tlater.com"
];
dnsProvider = "porkbun";
group = "nginx";
credentialFiles."HETZNER_API_KEY_FILE" = config.sops.secrets."hetzner-api".path;
credentialFiles = {
PORKBUN_API_KEY_FILE = config.sops.secrets."porkbun/api-key".path;
PORKBUN_SECRET_API_KEY_FILE = config.sops.secrets."porkbun/secret-api-key".path;
};
};
};

12
configuration/sops.nix
View file

@ -34,16 +34,20 @@
"heisenbridge/as-token" = { };
"heisenbridge/hs-token" = { };
"hetzner-api" = {
owner = "acme";
};
# Nextcloud
"nextcloud/tlater" = {
owner = "nextcloud";
group = "nextcloud";
};
# Porkbub/ACME
"porkbun/api-key" = {
owner = "acme";
};
"porkbun/secret-api-key" = {
owner = "acme";
};
# Restic
"restic/local-backups" = {
owner = "root";