More fixes for procul certs.

This commit is contained in:
niten 2021-11-29 21:56:28 -08:00
parent b10d055e25
commit a1d4e2aeb4
2 changed files with 21 additions and 23 deletions

View File

@ -87,24 +87,33 @@ in {
hosts.procul.external-interfaces = [ "extif0" ]; hosts.procul.external-interfaces = [ "extif0" ];
acme.host-domains.${hostname} = { acme.host-domains.${hostname} = {
${host-fqdn}.local-copies = { ${host-fqdn} = {
admin-email = "admin@${domain-name}";
local-copies = {
postgresql = { postgresql = {
user = config.systemd.services.postgresql.serviceConfig.User; user = config.systemd.services.postgresql.serviceConfig.User;
dependent-services = [ "postgresql.service" ]; dependent-services = [ "postgresql.service" ];
part-of = [ config.fudo.postgresql.systemd-target ]; part-of = [ config.fudo.postgresql.systemd-target ];
}; };
}; };
};
"imap.${domain-name}".local-copies.dovecot = { "imap.${domain-name}" = {
admin-email = "admin@${domain-name}";
local-copies.dovecot = {
user = config.services.dovecot2.user; user = config.services.dovecot2.user;
dependent-services = [ "dovecot2.service" ]; dependent-services = [ "dovecot2.service" ];
}; };
};
"smtp.${domain-name}".local-copies.postfix = { "smtp.${domain-name}" = {
admin-email = "admin@${domain-name}";
local-copies.postfix = {
user = config.services.postfix.user; user = config.services.postfix.user;
dependent-services = [ "postfix.service" ]; dependent-services = [ "postfix.service" ];
}; };
}; };
};
secrets.host-secrets.procul = let secrets.host-secrets.procul = let
files = config.fudo.secrets.files; files = config.fudo.secrets.files;
@ -242,16 +251,5 @@ in {
listen-port = 2222; listen-port = 2222;
}; };
}; };
acme = {
enable = true;
admin-address = "admin@${domain-name}";
hostnames = [
"informis.land"
"imap.informis.land"
"smtp.informis.land"
"gemini.informis.land"
];
};
}; };
} }

2
flake.lock generated
View File

@ -297,7 +297,7 @@
}, },
"fudo-lib_2": { "fudo-lib_2": {
"locked": { "locked": {
"narHash": "sha256-epp76qOzc1TQ0ESqTVqE6ZUjXj5tPSjIea8Gc+MyoLI=", "narHash": "sha256-O2CsIArXcPyiBtDbAiFNU2IvIBTqEljrwDJkGF0STbw=",
"path": "/state/fudo-lib", "path": "/state/fudo-lib",
"type": "path" "type": "path"
}, },