diff options
| author | sinanmohd <sinan@sinanmohd.com> | 2025-10-17 08:31:18 +0530 |
|---|---|---|
| committer | sinanmohd <sinan@sinanmohd.com> | 2025-10-17 08:45:14 +0530 |
| commit | 84c39b405972516a9be2e8be8729097f8691050f (patch) | |
| tree | 5a63186f3004e36a0f7560ee90ef358bd3662aa9 /os/kay/modules/internal/acme.nix | |
| parent | 5fd8a7084e907f4c1b4c2c86cfd69f622b4c294a (diff) | |
chore(os/kay): refactor
Diffstat (limited to 'os/kay/modules/internal/acme.nix')
| -rw-r--r-- | os/kay/modules/internal/acme.nix | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/os/kay/modules/internal/acme.nix b/os/kay/modules/internal/acme.nix new file mode 100644 index 0000000..60e40a8 --- /dev/null +++ b/os/kay/modules/internal/acme.nix @@ -0,0 +1,24 @@ +{ config, pkgs, ... }: +let + email = config.global.userdata.email; + domain = config.global.userdata.domain; + + environmentFile = pkgs.writeText "acme-dns" "RFC2136_NAMESERVER='[2001:470:ee65::1]:53'"; +in +{ + security.acme = { + acceptTerms = true; + defaults.email = email; + + certs.${domain} = { + inherit domain; + extraDomainNames = [ "*.${domain}" ]; + + dnsProvider = "rfc2136"; + dnsPropagationCheck = false; # local DNS server + + inherit environmentFile; + group = config.services.nginx.group; + }; + }; +} |