modules/services/acme.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

{
  flake.modules.nixos.acme =
    { config, ... }:
    {
      security.acme = {
        acceptTerms = true;
        defaults.server = "https://acme.ionos.com/directory";
        certs."schererleander.de" = {
          extraDomainNames = [
            "cloud.schererleander.de"
            "git.schererleander.de"
          ];
          extraLegoFlags = [ "--eab" ];
          environmentFile = config.sops.secrets."ionos-acme-env".path;
          group = "nginx";
        };
      };

      services.nginx.virtualHosts."schererleander.de" = {
        enableACME = true;
        forceSSL = true;
        locations."/".return = "301 https://github.com/schererleander";
      };
    };
}