from my phone so i cant see the changes lol

modules/features/certbot/default.nix

@@ -0,0 +1,15 @@
+{moduleWithSystem, ...}: {
+  flake.nixosModules.certbot = moduleWithSystem ({pkgs, ...}: {
+    security.acme.acceptTerms = true;
+    security.acme.defaults.email = "admin@voidarc.co.uk";
+
+    security.acme.certs."mail.voidarc.co.uk" = {
+      domain = "mail.voidarc.co.uk";
+      dnsProvider = "cloudflare";
+			credentialFiles = {
+			  "RFC2136_TSIG_SECRET_FILE" = "/run/secrets/tsig-secret-example.org";
+			}
+			;
+    };
+  });
+}

modules/features/sops/default.nix

@@ -0,0 +1,49 @@
+{
+  self,
+  inputs,
+  ...
+}: {
+  flake.nixosModules.secrets = {
+    config,
+    lib,
+    pkgs,
+    ...
+  }: {
+    imports = [inputs.sops-nix.nixosModules.sops];
+
+    sops = {
+      age.keyFile = "/etc/sops/age/keys.txt";
+      defaultSopsFile = ../../../secrets/secrets.yaml;
+
+      secrets = {
+        lidarr-api-key = {};
+        gitea-db-passwd = {};
+        immich-api-key = {};
+        immich-db-passwd = {};
+        immich-postgres-passwd = {};
+        mail-relay-user = {};
+        mail-relay-passwd = {};
+        silverbullet-user = {};
+      };
+      templates = {
+        "gitea.env".content = ''
+          GITEA__database__PASSWD=${config.sops.placeholder.gitea-db-passwd}
+          MYSQL_PASSWORD=${config.sops.placeholder.gitea-db-passwd}
+          MYSQL_ROOT_PASSWORD=${config.sops.placeholder.gitea-db-passwd}
+        '';
+        "immich.env".content = ''
+          DB_PASSWORD=${config.sops.placeholder.immich-db-passwd}
+          IMMICH_API_KEY=${config.sops.placeholder.immich-api-key}
+          POSTGRES_PASSWORD=${config.sops.placeholder.immich-postgres-passwd}
+        '';
+        "mail.env".content = ''
+          RELAY_USER=${config.sops.placeholder.mail-relay-user}
+          RELAY_PASSWORD=${config.sops.placeholder.mail-relay-passwd}
+        '';
+        "silverbullet.env".content = ''
+          SB_USER=${config.sops.placeholder.silverbullet-user}
+        '';
+      };
+    };
+  };
+}