ed9ec1aecf
few side refactors of this: - no more `dns.domain`, it all must rely on `fqdn`, prevents inconsistencies. - also added an specific host `tuxcord-acmetest` that uses the key zone for `nix.tuxcord.net` to test certificate pulling.
13 lines
225 B
Nix
13 lines
225 B
Nix
{ config, ... }:
|
|
let
|
|
inherit (config.networking) fqdn;
|
|
in
|
|
{
|
|
acme.enable = true;
|
|
acme.rfc2136.nameserver = "tuxcord.net";
|
|
|
|
dns.enable = true;
|
|
networking.fqdn = "nix.tuxcord.net";
|
|
time.timeZone = "Europe/Madrid";
|
|
}
|