feat(library): enable acme

This commit is contained in:
514fpv 2024-01-15 17:13:03 +08:00
parent d4159deab4
commit 0892f55dd5
Signed by: koishi
SSH key fingerprint: SHA256:axz0uIzzY+5W19i7QOUuiw5LSqhKfCBKPf3L4xFRxLw
2 changed files with 8 additions and 14 deletions

View file

@ -1,18 +1,11 @@
{
security.acme = {
acceptTerms = true;
defaults.email = "koishi@514fpv.one";
defaults.group = "nginx";
certs = let
cloudflare = {
dnsProvider = "cloudflare";
credentialsFile = "/nix/persist/secret/cloudflare";
};
in {
"514fpv.io" = cloudflare;
".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
security.acme.certs = let
cloudflare = {
dnsProvider = "cloudflare";
credentialsFile = "/nix/persist/secret/cloudflare";
};
in {
"514fpv.io" = cloudflare;
".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
};
environment.persistence."/nix/persist/fhs".directories = [ "/var/lib/acme" ];
}