feat: use one acme host for the whole domain

2026-06-02 12:54:17 +02:00
parent 17e85e83b9
commit 0f39cfdf32
2 changed files with 23 additions and 5 deletions
@@ -50,4 +50,23 @@
      AllowUsers = [ "leonhard" ];
    };
  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "admin@${config.kekleo.domain}";
+    defaults.webroot = "/var/lib/acme/acme-challenge/";
+    certs.${config.kekleo.domain} = {
+      group = config.services.nginx.group;
+    };
+  };
+
+  services.nginx = {
+    enable = true;
+
+    virtualHosts.${config.kekleo.domain} = {
+      forceSSL = true;
+      useACMEHost = config.kekleo.domain;
+      locations."/.well-known/".root = config.security.acme.defaults.webroot;
+    };
+  };
 }