breaking up mtls with better wrappers

2026-07-05 22:59:05 -05:00
parent 39504cd856
commit 1b98c83d3f
4 changed files with 302 additions and 514 deletions
@@ -15,7 +15,7 @@ in
      inputs.home-manager.nixosModules.home-manager
      nixos."${username}"
      nixos.ssh-new
-      # nixos.mtls
+      nixos.mtls
      nixos.mysops
      nixos.docker
      nixos.step-client
@@ -39,15 +39,15 @@ in
        ];

        # users.users."${username}".extraGroups = [ "mtls" ];
-        # mtls = {
-        #   enable = true;
-        #   subject = hostname;
-        #   san = names;
-        #   lifetime = "12h";
-        #   renew.onCalendar = "*:3/15";
-        #   renew.reloadUnits = [ "forgejo.service" "restic-rest-server.service" ];
-        #   certReaders = [ config.services.forgejo.user "restic" ];
-        # };
+        mtls = {
+          enable = true;
+          subject = hostname;
+          san = names;
+          # lifetime = "12h";
+          # renew.onCalendar = "*:3/15";
+          # renew.reloadUnits = [ "forgejo.service" "restic-rest-server.service" ];
+          # certReaders = [ config.services.forgejo.user "restic" ];
+        };

        # forgejo = {
        #   enable = true;