nixos/security: add acme through dns challenge

few side refactors of this: - no more `dns.domain`, it all must rely on `fqdn`, prevents inconsistencies. - also added an specific host `tuxcord-acmetest` that uses the key zone for `nix.tuxcord.net` to test certificate pulling.
2026-05-03 23:12:06 +02:00
parent 64c1ea18e0
commit a5b2e46586
12 changed files with 140 additions and 13 deletions
@@ -33,5 +33,6 @@ in
    tuxcord-ca = mkSystem "tuxcord-ca" "x86_64-linux";

    tuxcord-test = mkSystem "tuxcord-test" "x86_64-linux";
+    tuxcord-acmetest = mkSystem "tuxcord-acmetest" "x86_64-linux";
  };
 }