diff --git a/services/acme-cert-store.nix b/services/acme-cert-store.nix index 7c92b27..b53f1e6 100644 --- a/services/acme-cert-store.nix +++ b/services/acme-cert-store.nix @@ -10,23 +10,8 @@ ]; }; - security.acme = { - acceptTerms = true; - certs."vsinerva.fi".extraDomainNames = [ "*.vsinerva.fi" ]; - defaults = { - email = "vili.m.sinerva@gmail.com"; - environmentFile = "/var/lib/acme/dns-creds"; - dnsProvider = "ovh"; - extraLegoFlags = [ - "--dns.propagation-wait" - "60s" - ]; - postRun = '' - mkdir -p ${config.users.users."cert-store".home}/acme - cp fullchain.pem ${config.users.users."cert-store".home}/acme/ - cp key.pem ${config.users.users."cert-store".home}/acme/ - chmod o+r ${config.users.users."cert-store".home}/acme/*.pem - ''; - }; - }; + users.users.root.openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBsctvJR4JOVoTAas0+lb8662EXFsQVNozTntnR7o5R1 opnsense" + ]; + }