diff options
author | Azat Bahawi <azat@bahawi.net> | 2024-04-21 02:15:42 +0300 |
---|---|---|
committer | Azat Bahawi <azat@bahawi.net> | 2024-04-21 02:15:42 +0300 |
commit | e6ed60548397627bf10f561f9438201dbba0a36e (patch) | |
tree | f9a84c5957d2cc4fcd148065ee9365a0c851ae1c /modules/acme.nix | |
parent | 9ac64328603d44bd272175942d3ea3eaadcabd04 (diff) |
2024-04-21
Diffstat (limited to 'modules/acme.nix')
-rw-r--r-- | modules/acme.nix | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/modules/acme.nix b/modules/acme.nix new file mode 100644 index 0000000..6a75818 --- /dev/null +++ b/modules/acme.nix @@ -0,0 +1,36 @@ +{ config, lib, ... }: +with lib; +let + cfg = config.nixfiles.modules.acme; +in +{ + imports = [ + (mkAliasOptionModule [ "certs" ] [ + "security" + "acme" + "certs" + ]) + ]; + + options.nixfiles.modules.acme = { + enable = mkEnableOption "ACME"; + + email = mkOption { + description = "Email for notifications."; + type = with types; str; + default = "admin+acme@${my.domain.shire}"; + }; + }; + + config = mkIf cfg.enable { + ark.directories = [ "/var/lib/acme" ]; + + security.acme = { + acceptTerms = true; + defaults = { + inherit (cfg) email; + validMinDays = 60; + }; + }; + }; +} |