From 0d70fd2a9742f544c93bcf59aedd685fd392b74a Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 25 Jul 2026 22:26:35 +0200
Subject: feat(acme): setup ionos acme certificates

---
 modules/hosts/sachiel/flake-parts.nix |  2 +-
 modules/hosts/sachiel/secrets.nix     | 11 ++++-------
 2 files changed, 5 insertions(+), 8 deletions(-)

(limited to 'modules/hosts')

diff --git a/modules/hosts/sachiel/flake-parts.nix b/modules/hosts/sachiel/flake-parts.nix
index a81f0d6..9b2c143 100644
--- a/modules/hosts/sachiel/flake-parts.nix
+++ b/modules/hosts/sachiel/flake-parts.nix
@@ -7,9 +7,9 @@
       inputs.self.modules.nixos.sachiel
       inputs.self.modules.nixos.openssh
       inputs.self.modules.nixos.nginx
+      inputs.self.modules.nixos.acme
       inputs.self.modules.nixos.nextcloud
       inputs.self.modules.nixos.mail
-      inputs.self.modules.nixos.site
       inputs.self.modules.nixos.git
       inputs.self.modules.nixos.cgit
     ];
diff --git a/modules/hosts/sachiel/secrets.nix b/modules/hosts/sachiel/secrets.nix
index c301477..364522f 100644
--- a/modules/hosts/sachiel/secrets.nix
+++ b/modules/hosts/sachiel/secrets.nix
@@ -34,13 +34,10 @@
             mode = "0400";
             path = "/var/lib/git-server/.ssh/authorized_keys";
           };
-          "cert_fullchain" = {
-            owner = "nginx";
-            group = "nginx";
-          };
-          "cert_private" = {
-            owner = "nginx";
-            group = "nginx";
+          "ionos-acme-env" = {
+            owner = "acme";
+            group = "acme";
+            mode = "0400";
           };
         };
       };
-- 
cgit v1.3.1