John Lancaster
25 lines
560 B
Nix
25 lines
560 B
Nix
{ inputs, ... }:
|
|
let
|
|
ipAddress = "0.0.0.0";
|
|
in
|
|
{
|
|
flake.modules.nixos.step-ca = { pkgs, ... }: {
|
|
# https://github.com/NixOS/nixpkgs/blob/nixos-23.05/nixos/modules/services/security/step-ca.nix
|
|
services.step-ca = {
|
|
enable = true;
|
|
openFirewall = true;
|
|
address = ipAddress;
|
|
port = 8443;
|
|
|
|
# https://smallstep.com/docs/step-ca/configuration/#configuration-options
|
|
settings = {
|
|
root = "";
|
|
crt = "";
|
|
};
|
|
};
|
|
environment.systemPackages = with pkgs; [
|
|
step-ca
|
|
step-cli
|
|
];
|
|
};
|
|
} |