nixos/security: add acme through dns challenge

few side refactors of this: - no more `dns.domain`, it all must rely on `fqdn`, prevents inconsistencies. - also added an specific host `tuxcord-acmetest` that uses the key zone for `nix.tuxcord.net` to test certificate pulling.
2026-05-03 23:12:06 +02:00
parent 701a477d42
commit 9008f6fdb9
12 changed files with 140 additions and 13 deletions
@@ -1,5 +1,6 @@
 {
  imports = [
+    ./acme.nix
    ./dns.nix
    ./fail2ban.nix
    ./gitea.nix