privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/certificates: init, add internal wildcard cert

Browse source
This commit is contained in:
Max Headroom 2023-03-06 16:52:52 +01:00
parent 2348b8f0f3
commit b56e484bd6
2 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
cluster/services/certificates/default.nix Normal file
View file

@ -0,0 +1,12 @@
{
services.certificates = {
nodes = {
internal-wildcard = [ "checkmate" "VEGAS" ];
};
nixos = {
internal-wildcard = [
./internal-wildcard.nix
];
};
};
}

14
cluster/services/certificates/internal-wildcard.nix Normal file
View file

@ -0,0 +1,14 @@
{ tools, ... }:
let
inherit (tools.meta) domain;
in
{
security.acme.certs."internal.${domain}" = {
domain = "*.internal.${domain}";
extraDomainNames = [ "*.internal.${domain}" ];
dnsProvider = "pdns";
group = "nginx";
};
}