feat(acme): setup ionos acme certificates

2 files changed, 5 insertions, 8 deletions

diff --git a/modules/hosts/sachiel/flake-parts.nix b/modules/hosts/sachiel/flake-parts.nix
index a81f0d6..9b2c143 100644
--- a/modules/hosts/sachiel/flake-parts.nix
+++ b/modules/hosts/sachiel/flake-parts.nix
@@ -7,9 +7,9 @@
       inputs.self.modules.nixos.sachiel
       inputs.self.modules.nixos.openssh
       inputs.self.modules.nixos.nginx
+      inputs.self.modules.nixos.acme
       inputs.self.modules.nixos.nextcloud
       inputs.self.modules.nixos.mail
-      inputs.self.modules.nixos.site
       inputs.self.modules.nixos.git
       inputs.self.modules.nixos.cgit
     ];
diff --git a/modules/hosts/sachiel/secrets.nix b/modules/hosts/sachiel/secrets.nix
index c301477..364522f 100644
--- a/modules/hosts/sachiel/secrets.nix
+++ b/modules/hosts/sachiel/secrets.nix
@@ -34,13 +34,10 @@
             mode = "0400";
             path = "/var/lib/git-server/.ssh/authorized_keys";
           };
-          "cert_fullchain" = {
-            owner = "nginx";
-            group = "nginx";
-          };
-          "cert_private" = {
-            owner = "nginx";
-            group = "nginx";
+          "ionos-acme-env" = {
+            owner = "acme";
+            group = "acme";
+            mode = "0400";
           };
         };
       };