14 lines
350 B
Nix
14 lines
350 B
Nix
{config, ...}: {
|
|
age.secrets.hetzner-dns.file = ../../secrets/hetzner-dns.age;
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults.email = "acme@buffet.sh";
|
|
certs."buffet.sh" = {
|
|
domain = "*.buffet.sh";
|
|
group = "nginx";
|
|
dnsProvider = "hetzner";
|
|
credentialsFile = config.age.secrets.hetzner-dns.path;
|
|
};
|
|
};
|
|
}
|