2 commits

Author	SHA1	Message	Date
Bruno BELANYI	d1d33fd1d1	secrets: modularise ... Instead of reading from the 'secrets' directory all over the place, consolidate all secrets-handling inside the same module. This means that finally, the 'acme' service does not need to come read right into this repository, however this leads to a potentially unsecure setup (because I am storing passwords in the Nix store)... I have decided not to care about this relatively minor issue, but I could revisit it by using `sops-nix` in the future.	2021-02-08 10:49:59 +00:00
Bruno BELANYI	32444fe8ae	services: add nginx and acme auto-configuration ... This ensures that the recommened settings are turned on when using Nginx in any service. It also provides for a SSL certificate using Let's Encrypt.	2021-02-03 11:55:33 +01:00