nixos/security: add acme through dns challenge

few side refactors of this: - no more `dns.domain`, it all must rely on `fqdn`, prevents inconsistencies. - also added an specific host `tuxcord-acmetest` that uses the key zone for `nix.tuxcord.net` to test certificate pulling.
2026-05-03 23:12:06 +02:00
parent 701a477d42
commit 9008f6fdb9
12 changed files with 140 additions and 13 deletions
@@ -1,4 +1,5 @@
 {
+  acme.enable = false;
  dns.enable = true;
  networking.fqdn = "tuxcord.test";
 }