acme: make ToS and contact config common

This commit is contained in:
Pierre Bourdon 2024-08-16 08:55:49 +02:00
parent 8ffb7e51f1
commit ce3a40671c
Signed by untrusted user: delroth
GPG key ID: 6FB80DCD84DA0F1C
5 changed files with 4 additions and 7 deletions

View file

@ -57,4 +57,7 @@
]; ];
time.timeZone = "UTC"; time.timeZone = "UTC";
security.acme.acceptTerms = true;
security.acme.defaults.email = "infra@forkos.org";
} }

View file

@ -30,8 +30,6 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
services.qemuGuest.enable = true; services.qemuGuest.enable = true;
systemd.network.enable = true; systemd.network.enable = true;
security.acme.defaults.email = "bagel-acme@lahfa.xyz";
security.acme.acceptTerms = true;
networking.useDHCP = lib.mkDefault false; networking.useDHCP = lib.mkDefault false;
systemd.network.networks."10-nat-lan" = { systemd.network.networks."10-nat-lan" = {

View file

@ -47,9 +47,6 @@
bagel.sysadmin.enable = true; bagel.sysadmin.enable = true;
security.acme.acceptTerms = true;
security.acme.defaults.email = "infra@forkos.org";
services.openssh.enable = true; services.openssh.enable = true;
system.stateVersion = "24.11"; system.stateVersion = "24.11";

View file

@ -1,3 +1,4 @@
{ lib, ... }:
{ {
imports = [ ./hardware.nix ]; imports = [ ./hardware.nix ];

View file

@ -42,8 +42,6 @@ in {
networking.firewall.extraInputRules = '' networking.firewall.extraInputRules = ''
ip6 saddr 2a01:584:11::/64 tcp sport < 1024 tcp dport 443 accept; ip6 saddr 2a01:584:11::/64 tcp sport < 1024 tcp dport 443 accept;
''; '';
security.acme.acceptTerms = true;
security.acme.defaults.email = "infra@forkos.org";
services.nginx = { services.nginx = {
enable = true; enable = true;
virtualHosts."vpn-gw.wob01.infra.forkos.org" = { virtualHosts."vpn-gw.wob01.infra.forkos.org" = {