all repos — nixfiles @ b2b93dbd8cc455e0a951b2b4a17988bfee493f7a

System and user configuration, managed by nix and home-manager

drop actalis ACME config, use Let's Encrypt annoyances: - too many certificate expiry notification emails - 180 day password rotation requirement

Alin
commit

b2b93dbd8cc455e0a951b2b4a17988bfee493f7a

parent

81eb13b8a16a53287b7a1f338852ee88796da272

2 files changed, 0 insertions(+), 10 deletions(-)

changed files
M secrets/acme.age → secrets/acme.age

Not showing binary file.

M system/settings/services/caddy.nix → system/settings/services/caddy.nix
@@ -15,8 +15,6 @@ defaults = {
       reloadServices = [ "caddy" ];
 
       environmentFile = config.age.secrets.acme.path;
-      server = "https://acme-api.actalis.com/acme/directory";
-      extraLegoFlags = [ "--eab" ]; # environmentFile must contain LEGO_EAB_KID and LEGO_EAB_HMAC
     };
     acceptTerms = true;
   };

@@ -25,14 +23,6 @@ services.caddy = {
     enable = true;
     openFirewall = true;
     group = "caddy";
-    email = config.security.acme.defaults.email;
-    acmeCA = config.security.acme.defaults.server;
-    globalConfig = ''
-      acme_eab {
-        key_id {$EAB_KEY_ID}
-        mac_key {$EAB_MAC_KEY}
-      }
-    '';
     virtualHosts = {
       "${config.networking.fqdn}" = {
         extraConfig = lib.mkDefault ''