acme: switch to OVH API

hosts/hades/secrets.nix

@@ -13,8 +13,6 @@
         // attrs;
     in
       lib.mapAttrs toSecret {
-        "gandi/api-key" = {};
-
         "lohr/shared-secret" = {};
 
         "matrix-synapse/secret-config" = {
@@ -29,6 +27,8 @@
           owner = "nextcloud";
         };
 
+        "ovh/credentials" = {};
+
         "paperless/admin-password" = {};
         "paperless/secret-key" = {};
 

modules/secrets/ovh/credentials.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 k2gHjw XED7gkKAp1ioBegA7ryqULRF1BORpW74esfIGp9zPE8
+ANxnQN+tox9KYdZvNZFZvQxOymckldPQMhFnz6fSIBo
+-> ssh-ed25519 pX8y2g 9wgPqL6GoOxad5AAUmDAYj0h/57AEM8VsQKq1pGTtjM
+SxD++XJioZLpt6C8Xse5Nmz4wtL0Fb5NKWo5ijKpyv8
+--- 3qOJnkY3Uc4fIex9mgz2+w+su5dS7K7Tmtk1hiqkn9M
+ÁXª¨àeéˆaLQH2*ZÅTé¿ ‘®P;Ý(jCÌ€k‡viäµû<C2B5>ÿ’ħ¡à†kæ`™ô]mò<6D>ÿBñ,³±,ü÷?!¶{àŠ%­eÙì(„Su¿-SŸ
D¢¾“=H#‡„¼Þq=ï<>Uùí;=OÍ<÷R¼ÇÎE±“<+&­èdÂæ<18>>G+_oP¥Þ]ÿê¦RÄßL$Ö³\š°ü0ø¤N!þ"Áã&÷%Nž à<ËÃ,òv°1ÿ‘Ê‘Új1

modules/secrets/secrets.nix

@@ -23,6 +23,8 @@ in {
 
   "nextcloud/admin-pass.age".publicKeys = [alarsyo hades];
 
+  "ovh/credentials.age".publicKeys = [alarsyo hades];
+
   "paperless/admin-password.age".publicKeys = [alarsyo hades];
   "paperless/secret-key.age".publicKeys = [alarsyo hades];
 

services/nginx.nix

@@ -66,8 +66,8 @@ in {
         gandiKey = config.my.secrets.gandiKey;
       in {
         "${fqdn}" = {
-          dnsProvider = "gandiv5";
+          dnsProvider = "ovh";
-          credentialsFile = config.age.secrets."gandi/api-key".path;
+          credentialsFile = config.age.secrets."ovh/credentials".path;
           group = "nginx";
         };
       };