mirror of
https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git
synced 2024-11-26 21:01:31 +00:00
23 lines
545 B
Nix
23 lines
545 B
Nix
{ config, pkgs, ... }:
|
|
let
|
|
cfg = config.services.userdata;
|
|
in
|
|
{
|
|
users.groups.acmerecievers = {
|
|
members = [ "nginx" "dovecot2" "postfix" "virtualMail" "ocserv" ];
|
|
};
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
email = "${cfg.username}@${cfg.domain}";
|
|
certs = {
|
|
"${cfg.domain}" = {
|
|
domain = "*.${cfg.domain}";
|
|
extraDomainNames = [ "${cfg.domain}" ];
|
|
group = "acmerecievers";
|
|
dnsProvider = "cloudflare";
|
|
credentialsFile = "/var/lib/cloudflare/Credentials.ini";
|
|
};
|
|
};
|
|
};
|
|
}
|