nixos/security: add acme through dns challenge

few side refactors of this: - no more `dns.domain`, it all must rely on `fqdn`, prevents inconsistencies. - also added an specific host `tuxcord-acmetest` that uses the key zone for `nix.tuxcord.net` to test certificate pulling.
2026-05-03 23:12:06 +02:00
parent 516ac80d28
commit 0fd9693941
12 changed files with 140 additions and 13 deletions
@@ -0,0 +1,11 @@
+{
+  acme = {
+    enable = true;
+    rfc2136.nameserver = "tuxcord.net";
+  };
+
+  dns.enable = true;
+  networking.fqdn = "nix.tuxcord.net";
+
+  time.timeZone = "Europe/Madrid";
+}