services: move vault to local

2024-10-22 12:43:09 +02:00 · 2024-10-22 12:43:09 +02:00 · c436a8e2b9
parent efc049e739
commit c436a8e2b9
2 changed files with 6 additions and 1 deletions
--- a/modules/services/nas/nginx.nix
+++ b/modules/services/nas/nginx.nix
@ -26,7 +26,7 @@
    acceptTerms = true;
    defaults = {
      email = "webmaster@opel-online.de";
-      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
+#      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
      dnsResolver = "9.9.9.9:53";
    };
    certs = {
@ -39,4 +39,9 @@
    };
  };

+  age.secrets."services/acme/opel-online" = {
+    file = ../../../secrets/services/acme/opel-online.age;
+    owner = "acme";
+  };
+
 }
--- a/secrets/services/acme/opel-online.age
+++ b/secrets/services/acme/opel-online.age