modules/acme/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ config, lib, pkgs, ... }:

{
  security.acme = {
    acceptTerms = true;
    defaults = {
      email = "hostmaster@vapor.systems";
      dnsProvider = "pdns";
      credentialsFile = "/etc/secrets/pdns_api.env";
    };
  };

  secrets = {
    pdnsAPI = {
      source = ../../secrets/pdns/pdns_api.env;
      dest = "/etc/secrets/pdns_api.env";
    };
  };

  users.users.nginx.extraGroups = [ "acme" ];
}