1
0
Fork 0
dotfiles/system/nixos/acme-tanker.nix

36 lines
744 B
Nix

{ config, ... }:
{
security.acme = {
acceptTerms = true;
defaults = {
email = "acme@kempkens.io";
group = "nginx";
dnsProvider = "cloudflare";
credentialsFile = config.age.secrets.acme-credentials.path;
dnsResolver = "1.1.1.1:53";
dnsPropagationCheck = true;
reloadServices = [ "nginx.service" ];
};
certs = {
"kempkens.io" = {
extraDomainNames = [ "*.kempkens.io" ];
};
"daniel.sx" = {
domain = "*.daniel.sx";
extraDomainNames = [ "*.cache.daniel.sx" ];
};
"nifoc.pw" = {
domain = "*.nifoc.pw";
};
"headscale.kempkens.network" = {
domain = "*.headscale.kempkens.network";
};
};
};
}