1 files changed, 24 insertions, 0 deletions
diff --git a/os/kay/modules/internal/acme.nix b/os/kay/modules/internal/acme.nix
new file mode 100644
index 0000000..60e40a8
--- /dev/null
+++ b/os/kay/modules/internal/acme.nix
@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+let
+  email = config.global.userdata.email;
+  domain = config.global.userdata.domain;
+
+  environmentFile = pkgs.writeText "acme-dns" "RFC2136_NAMESERVER='[2001:470:ee65::1]:53'";
+in
+{
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = email;
+
+    certs.${domain} = {
+      inherit domain;
+      extraDomainNames = [ "*.${domain}" ];
+
+      dnsProvider = "rfc2136";
+      dnsPropagationCheck = false; # local DNS server
+
+      inherit environmentFile;
+      group = config.services.nginx.group;
+    };
+  };
+}