From 0d70fd2a9742f544c93bcf59aedd685fd392b74a Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 25 Jul 2026 22:26:35 +0200
Subject: feat(acme): setup ionos acme certificates

---
 modules/services/acme.nix | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 modules/services/acme.nix

(limited to 'modules/services/acme.nix')

diff --git a/modules/services/acme.nix b/modules/services/acme.nix
new file mode 100644
index 0000000..0b6c475
--- /dev/null
+++ b/modules/services/acme.nix
@@ -0,0 +1,25 @@
+{
+  flake.modules.nixos.acme =
+    { config, ... }:
+    {
+      security.acme = {
+        acceptTerms = true;
+        defaults.server = "https://acme.ionos.com/directory";
+        certs."schererleander.de" = {
+          extraDomainNames = [
+            "cloud.schererleander.de"
+            "git.schererleander.de"
+          ];
+          extraLegoFlags = [ "--eab" ];
+          environmentFile = config.sops.secrets."ionos-acme-env".path;
+          group = "nginx";
+        };
+      };
+
+      services.nginx.virtualHosts."schererleander.de" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/".return = "301 https://github.com/schererleander";
+      };
+    };
+}
-- 
cgit v1.3.1