Infini-OPTIPLEX: refactor nginx config and use acme certs

This commit is contained in:
Infinidoge 2024-04-26 02:43:52 -04:00
parent 12bb7ac8db
commit d784d4eee4
Signed by: Infinidoge
SSH key fingerprint: SHA256:VEv3zmkBzcYYle6/37h+BbOyNDbGy/o8SHh7fcs9RbQ
8 changed files with 83 additions and 31 deletions

View file

@ -33,8 +33,7 @@ in
"borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";};
}
(mkIf config.services.nginx.enable {
"inx.moe.pem" = withOwnerGroup "nginx" secrets."inx.moe.pem";
"inx.moe.key" = withOwnerGroup "nginx" secrets."inx.moe.key";
inherit (secrets) "cloudflare";
})
(mkIf config.services.vaultwarden.enable {
"vaultwarden" = withOwnerGroup "vaultwarden" secrets."vaultwarden";