modules/acme/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

{ config, lib, pkgs, ... }:

{
  security.acme = {
    acceptTerms = true;
    defaults = {
      email = "hostmaster@vapor.systems";
      dnsProvider = "pdns";
      credentialsFile = "/etc/secrets/pdns_api.env";
    };
  };

  secrets = {
    pdnsAPI = {
      source = ../../secrets/pdns/pdns_api.env;
      dest = "/etc/secrets/pdns_api.env";
    };
  };

  users.users.nginx = lib.mkIf config.services.nginx.enable {
    extraGroups = [ "acme" ];
  };
}