From 3de711a1350961f062df25f69b7198c7f5a05cde Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 25 Jul 2026 23:17:56 +0200
Subject: fix(ssl): restore static wildcard certificate

---
 modules/services/acme.nix | 16 ++--------------
 1 file changed, 2 insertions(+), 14 deletions(-)

(limited to 'modules/services/acme.nix')

diff --git a/modules/services/acme.nix b/modules/services/acme.nix
index 128715c..5ece2cf 100644
--- a/modules/services/acme.nix
+++ b/modules/services/acme.nix
@@ -2,22 +2,10 @@
   flake.modules.nixos.acme =
     { config, ... }:
     {
-      security.acme = {
-        acceptTerms = true;
-        defaults = {
-          server = "https://acme.ionos.com/directory";
-          extraLegoFlags = [ "--eab" ];
-          environmentFile = config.sops.secrets."ionos-acme-env".path;
-          group = "nginx";
-        };
-        certs."schererleander.de" = {
-          domain = "*.schererleander.de";
-        };
-      };
-
       services.nginx.virtualHosts."schererleander.de" = {
-        enableACME = true;
         forceSSL = true;
+        sslCertificate = config.sops.secrets."cert_fullchain".path;
+        sslCertificateKey = config.sops.secrets."cert_private".path;
         locations."/".return = "301 https://github.com/schererleander";
       };
     };
-- 
cgit v1.3.1