rm -fr certget:

data.nix

@@ -15,8 +15,6 @@ rec {
 
     jakstpub = 505;
 
-    certget = 506;
-
     photoprism = 507;
   };
 

hosts/vno3-rp3b/configuration.nix

@@ -76,12 +76,6 @@
       node_exporter.enable = true;
       sshguard.enable = true;
 
-      certget = {
-        enable = true;
-        uidgid = myData.uidgid.certget;
-        sshKeys = [myData.hosts."vno1-oh2.servers.jakst".publicKey];
-      };
-
       borgstor = {
         enable = true;
         dataDir = "/data/borg";

modules/services/certget/default.nix

@@ -1,32 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: let
-  cfg = config.mj.services.certget;
-in {
-  options.mj.services.certget = with lib.types; {
-    enable = lib.mkEnableOption "receive acme certs from somewhere";
-    uidgid = lib.mkOption {type = int;};
-    sshKeys = lib.mkOption {type = listOf str;};
-  };
-
-  config = lib.mkIf cfg.enable {
-    users.users.certget = {
-      description = "Cert Getter";
-      home = "/var/lib/certget";
-      shell = "/bin/sh";
-      group = "certget";
-      isSystemUser = true;
-      createHome = true;
-      uid = cfg.uidgid;
-      openssh.authorizedKeys.keys =
-        map (
-          k: "command=\"${pkgs.rrsync}/bin/rrsync /var/lib/certget\",restrict ${k}"
-        )
-        cfg.sshKeys;
-    };
-    users.groups.certget.gid = cfg.uidgid;
-  };
-}

modules/services/default.nix

@@ -1,7 +1,6 @@
 {...}: {
   imports = [
     ./borgstor
-    ./certget
     ./deployerbot
     ./friendlyport
     ./gitea