nixos/global/acme/default.nix
2025-01-13 11:52:09 +08:00

26 lines
448 B
Nix

{
pkgs,
lib,
config,
...
}:
with lib;
let
cfg = config.global.acme;
in
{
options.global.acme = {
enable = mkEnableOption "ACME SSL certificates";
};
config = mkIf cfg.enable {
security.acme = {
acceptTerms = true;
defaults.email = mkDefault "koishi@514fpv.one";
defaults.group = config.services.nginx.group;
};
environment.persistence."/nix/persist/fhs".directories = [ "/var/lib/acme" ];
};
}