nix packages for repo scripts, automatic SAN for self-signed cert, and ed25519

2026-04-13 09:39:29 +02:00 · 2026-04-13 09:39:29 +02:00 · c23d734e09
commit c23d734e09
parent 635372c80e
7 changed files with 96 additions and 73 deletions
--- a/packages/gen-syncthing-cert.nix
+++ b/packages/gen-syncthing-cert.nix
@ -0,0 +1,14 @@
+# Generates Syncthing TLS certs for managed hosts that don't have one.
+{
+  pkgs,
+  agenix-pkg,
+}:
+pkgs.writeShellApplication {
+  name = "gen-syncthing-cert";
+  runtimeInputs = [
+    pkgs.jq
+    pkgs.syncthing
+    agenix-pkg
+  ];
+  text = builtins.readFile ../bin/gen-syncthing-cert;
+}