1
Fork 0
mirror of https://github.com/thegeneralist01/config.git synced 2026-10-09 21:03:30 +02:00

nixos: migrate server services to thegeneralist

Move hosted services and secrets from the retired central hosts, persist USB storage and ownership, harden RTL8822BU Wi-Fi, repair DNS behavior, and order CoreDNS after Tailscale.
This commit is contained in:
TheGeneralist 2026-10-09 14:21:55 +02:00
parent 7f5ecd917b
commit bd887883f7
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4
41 changed files with 183 additions and 511 deletions

Binary file not shown.

View file

@ -0,0 +1,38 @@
{ config, ... }: let
domain = "thegeneralist01.com";
in {
age.secrets.acmeEnvironment.file = ./acmeEnvironment.age;
security.acme = {
defaults = {
# Options: https://go-acme.github.io/lego/dns/acme
environmentFile = config.age.secrets.acmeEnvironment.path;
email = "thegeneralist01@proton.me";
dnsResolver = "1.1.1.1";
dnsProvider = "cloudflare";
};
certs = {
${domain} = {
extraDomainNames = [ "*.${domain}" ];
group = "acme";
};
"git.${domain}" = {
group = "acme";
};
"internal.${domain}" = {
group = "acme";
};
"plex.${domain}" = {
group = "acme";
};
"archive.${domain}" = {
group = "acme";
};
};
acceptTerms = true;
};
users.groups.acme.members = [ "nginx" ];
}