profiles/server/acme.nix


1
2
3
4
5
6
7
8
9
10
11

{ config, lib, ... }: with lib; {
  security.acme = {
    acceptTerms = true;
    defaults = {
      extraLegoRunFlags = ["--preferred-chain" "ISRG Root X1"];
      email = my.email;
      dnsProvider = "porkbun";
      credentialsFile = config.secrets.porkbun.path;
    };
  };
}