feat: add a keyserver
This commit is contained in:
parent
cb6f9c2b8e
commit
6ae584c895
3 changed files with 66 additions and 0 deletions
|
@ -10,3 +10,8 @@ The goal is to back these up in multiple locations.
|
|||
| UL | skynet | https://gitlab.skynet.ie/compsoc1/compsoc/open-goverance | |
|
||||
| | | | |
|
||||
|
||||
|
||||
## Keys
|
||||
We host our own keyserver: https://keyserver.skynet.ie
|
||||
Use it in commands like so:
|
||||
``gpg --keyserver hkp://keyserver.skynet.ie:80 --send-key KEY_ID``
|
||||
|
|
59
applications/open_governance/keyserver.nix
Normal file
59
applications/open_governance/keyserver.nix
Normal file
|
@ -0,0 +1,59 @@
|
|||
/*
|
||||
This file is for hosting teh open governance for other societies
|
||||
*/
|
||||
{
|
||||
lib,
|
||||
config,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
with lib; let
|
||||
name = "keyserver";
|
||||
cfg = config.services.skynet."${name}";
|
||||
port = 11371;
|
||||
in {
|
||||
imports = [
|
||||
../acme.nix
|
||||
../dns.nix
|
||||
];
|
||||
|
||||
options.services.skynet."${name}" = {
|
||||
host = {
|
||||
ip = mkOption {
|
||||
type = types.str;
|
||||
};
|
||||
name = mkOption {
|
||||
type = types.str;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
config = {
|
||||
skynet_acme.domains = [
|
||||
"${name}.skynet.ie"
|
||||
];
|
||||
|
||||
skynet_dns.records = [
|
||||
{
|
||||
record = "${name}";
|
||||
r_type = "CNAME";
|
||||
value = cfg.host.name;
|
||||
}
|
||||
];
|
||||
|
||||
services.sks = {
|
||||
enable = true;
|
||||
hkpPort = port;
|
||||
};
|
||||
|
||||
services.nginx.virtualHosts = {
|
||||
"${name}.skynet.ie" = {
|
||||
forceSSL = true;
|
||||
useACMEHost = "skynet";
|
||||
locations."/" = {
|
||||
proxyPass = "http://localhost:${toString port}";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue