prescientmoon/satellite
1
Fork 0
Code Activity

Move to cloudflare dns

Browse source
This commit is contained in:
prescientmoon 2024-05-09 03:33:22 +02:00
parent 6083cba5d6
commit 2f2ae6b983
Signed by: prescientmoon
SSH key fingerprint: SHA256:UUF9JT2s8Xfyv76b8ZuVL7XrmimH4o49p4b+iexbVH4
5 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
home/features/cli/productivity/mail.nix
View file

@ -57,7 +57,7 @@
neomutt.enable = true;
};
# }}}
# {{{ Email client
# {{{ Neomutt
neomutt = {
enable = true;
sendMailCommand = "msmtpq --read-envelope-from --read-recipients";

3
home/features/wayland/hyprland/hyprland.conf
View file

@ -46,6 +46,9 @@ animations {
# Execute apps at launch
exec-once = wezterm & firefox & discocss & spot & obsidian & obsidiantui & smosgui
# Without this, xdg-open doesn't work
exec = systemctl --user import-environment PATH && systemctl --user restart xdg-desktop-portal.service
# {{{ Window rules
# {{{ Automatically move stuff to workspaces
windowrulev2 = workspace 2 silent, title:^(.*Firefox.*)$

8
hosts/nixos/common/optional/services/acme.nix
View file

@ -1,16 +1,14 @@
{ config, ... }: {
sops.secrets.porkbun_api_key.sopsFile = ../../secrets.yaml;
sops.secrets.porkbun_secret_api_key.sopsFile = ../../secrets.yaml;
sops.secrets.cloudflare_dns_api_token.sopsFile = ../../secrets.yaml;
sops.templates."acme.env".content = ''
PORKBUN_API_KEY=${config.sops.placeholder.porkbun_api_key}
PORKBUN_SECRET_API_KEY=${config.sops.placeholder.porkbun_secret_api_key}
CF_DNS_API_TOKEN=${config.sops.placeholder.cloudflare_dns_api_token}
'';
security.acme.acceptTerms = true;
security.acme.defaults = {
email = "acme@moonythm.dev";
dnsProvider = "porkbun";
dnsProvider = "cloudflare";
environmentFile = config.sops.templates."acme.env".path;
};

7
hosts/nixos/common/secrets.yaml
View file

@ -1,7 +1,6 @@
wireless: ENC[AES256_GCM,data:Ib0PdBd2r/DPyE6Ah9NffT8Tw8c2y+seGFrE0e9GkyRaStdYMiiIlWCiaBO0u1HHaVV+2MQ33MnMdqyCGRlqGk45kl0GIwVR5iAiSYnobj/6wcse+kx/+5mzNOHXD1kJRGJBm5+SN9ntiGABNkQXJdn/Qoc/ukY1uaGe2nBeFKmGdD9JL7KfgdI5jYjQYyDbCL9JUszxkXNcplIRBAAy8JDaBVeo9HgI0QDIZToPKwuEeQoA9XzdimrjbCazlZy3ZvjAuoQXmrc1nIRHF5GabSRGTFTnTfcBeW2fGpUxmIhLyucn2DIQBXLm+RDdMLWoqcGbKiLVqKyUXck3ZZyoHMf2b9N52xMUwcS7,iv:ozkDwWmurWTD8TZHGvWL9Yh8cOrP1PzSBkz+1bBZybo=,tag:iGPjRaOoGRcOWJMweTL2yA==,type:str]
adrielus_password: ENC[AES256_GCM,data:lREgbcKwzAJQ3PPTWt7LXmgAsrKFCN+baQx4Q2YrHlu16yvKpmaZzPHJ/C5IjucUNbdceTs6Ef99IWzju0d8Hl5Z5UTMspYIhQ==,iv:JqnL3zfCd/xMRqTciA/Q6nYmFKzJkBqda4zucsE5KFw=,tag:RGZ/0/NEpdchj9h/l3Z7Ig==,type:str]
porkbun_api_key: ENC[AES256_GCM,data:cWUk5+JEnI7dhVskK4Gr2oBJWcbmnsTiuEaXhDupRfDJheI5ySh7rVnvOZn7lJ7toqq6HW0qZ6WZES721Mc90khq1IM=,iv:IaaYv/RrZm+iUmvm5vc1CMX6JBicGh4RV8d4bhX/Xfw=,tag:kRG5tUsKlEAm9pGFP4UuSA==,type:str]
porkbun_secret_api_key: ENC[AES256_GCM,data:doWMi6+3CNGd0y49jqtzRbzzxlVQR59CFo/1XSLiBx/mjJBL0WLfJEmtY9ZWVfwdmoY8TQuWBgizutexRhdc32OY6TA=,iv:v3z9viXTcI4VvIUB1INGlVaahQty4xt+VPLv9QnGivQ=,tag:cIzSwu1nrvvWmyvBlueGsA==,type:str]
cloudflare_dns_api_token: ENC[AES256_GCM,data:SAIMCvKOpGb5g9s03Xapc08KpOgLI+qlT5oiH/uNGxV+9JFSX3nvmQ==,iv:HFKcmHRG4EEOuJ8gRD0ZWsE18SLaZjewMSLznboLUeI=,tag:z21GURSxvNmZ4qkbri9mDQ==,type:str]
sops:
kms: []
gcp_kms: []
@ -35,8 +34,8 @@ sops:
WFd4ZFNHWG5Cakw5cU9MRE9HWHQ4THMKr/S7v1Oj3zQziMtI/NuFVm6AaJF5JV5U
sEr2nEptYFz4G6YL5psQGXHaKzQKBg+crgKRbYL4akhqT7pfYPC0bQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-07T09:55:54Z"
mac: ENC[AES256_GCM,data:I7FNDroWbk612o2lqM837fDivrb17AqJctIrtYM+GTlqtpPH6yUB8QFGt1NLB/btuwAICN+8C8zrnlhp9Hi3SUoXgcS8UFUHZ19a0Nzy8Ae1JYhej5BQq+prl9P9K1sVDUkJPJY9+iHW8NBtLKP74RlC6wnYLYIknVqawFXo+/A=,iv:jG9d0eIsiOYykiuKzwMRV6mtgMPTw/hnwE96oE0TEoA=,tag:gO7kvxnEvEJf4HFC46QMig==,type:str]
lastmodified: "2024-05-09T01:31:33Z"
mac: ENC[AES256_GCM,data:W7sfnSzxLNAjdLtgwIlYhjaxa3gobh8El/cVggJTOiJVm1bC5TdLd0rUSh7J0UkvGj/lfPYjDDtYayaf09pjo8vLrZvH1SIy5wVF0ggcLM0tJxVqV8MDS+5pdUJiDOTfMiX1hyMBRH+N75PIqUMCte5x2zJg/79JMjch+E3NmA8=,iv:OAlKpC/2pz0ilwCNaBTsqTR/wNz6ZIVDgohDT8RvE5Y=,tag:VFAgHyr+DiWEeGaCSCh6og==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

2
hosts/nixos/lapetus/default.nix
View file

@ -19,10 +19,10 @@
./services/invidious.nix
./services/diptime.nix
./services/radicale.nix
./services/ddclient.nix
./services/redlib.nix
./services/jellyfin.nix
./services/qbittorrent.nix
# ./services/ddclient.nix
./filesystems
./hardware
];