yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

rename TLDs to tlds

Browse Source
This commit is contained in:
pinpox
2025-09-01 13:25:09 +02:00
parent d2456be3dd
commit 63c0db482f
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
clanServices/certificates/README.md
View File

@@ -24,7 +24,7 @@ inventory = {
module.name = "certificates"; module.name = "certificates";
module.input = "self"; module.input = "self";
roles.ca.machines.ca.settings.TLDs = [ "foo" ]; roles.ca.machines.ca.settings.tlds = [ "foo" ];
roles.default.machines.client = { }; roles.default.machines.client = { };
roles.default.machines.server = { }; roles.default.machines.server = { };
}; };

6
clanServices/certificates/default.nix
View File

@@ -22,7 +22,7 @@
''; '';
}; };
options.TLDs = lib.mkOption { options.tlds = lib.mkOption {
type = lib.types.listOf lib.types.str; type = lib.types.listOf lib.types.str;
description = "Top level domain for this CA. Certificates will be issued and trusted for *.<tld>"; description = "Top level domain for this CA. Certificates will be issued and trusted for *.<tld>";
}; };
@@ -46,7 +46,7 @@
... ...
}: }:
let let
domains = map (tld: "ca.${tld}") settings.TLDs; domains = map (tld: "ca.${tld}") settings.tlds;
in in
{ {
security.acme.defaults.email = settings.acmeEmail; security.acme.defaults.email = settings.acmeEmail;
@@ -125,7 +125,7 @@
"nameConstraints": { "nameConstraints": {
"critical": true, "critical": true,
"permittedDNSDomains": [${ "permittedDNSDomains": [${
(lib.strings.concatStringsSep "," (map (tld: ''"${tld}"'') settings.TLDs)) (lib.strings.concatStringsSep "," (map (tld: ''"${tld}"'') settings.tlds))
}] }]
} }
} }

2
clanServices/certificates/tests/vm/default.nix
View File

@@ -13,7 +13,7 @@
module.name = "certificates"; module.name = "certificates";
module.input = "self"; module.input = "self";
roles.ca.machines.ca.settings.TLDs = [ "foo" ]; roles.ca.machines.ca.settings.tlds = [ "foo" ];
roles.default.machines.client = { }; roles.default.machines.client = { };
roles.default.machines.server = { }; roles.default.machines.server = { };
}; };