rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: Refactor web-servers module and move common configuration to common.nix

Browse source
This commit is contained in:
Mohammad Rafiq 2025-06-12 21:35:43 +08:00
parent 7093a338f4
commit e5f942acbe
No known key found for this signature in database
7 changed files with 94 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

32
modules/nixos/server/web-servers/default.nix
View file

@ -1,15 +1,25 @@
{ config, ... }:
{ config, lib, ... }:
let
inherit (lib) mkMerge mkIf mkEnableOption;
cfg = config.server.web-servers;
in
{
config = {
security.acme = {
acceptTerms = true;
defaults = {
email = "rafiq@rrv.sh";
dnsProvider = "cloudflare";
credentialFiles = {
"CLOUDFLARE_DNS_API_TOKEN_FILE" = config.sops.secrets."keys/cloudflare".path;
options.server.web-servers = {
enableSSL = mkEnableOption "";
};
config = mkMerge [
(mkIf cfg.enableSSL {
security.acme = {
acceptTerms = true;
defaults = {
inherit (config.system.mainUser) email;
dnsProvider = "cloudflare";
credentialFiles = {
"CLOUDFLARE_DNS_API_TOKEN_FILE" = config.sops.secrets."keys/cloudflare".path;
};
};
};
};
};
})
];
}