at 24.05-pre 342 B view raw
1{ lib, nodes, pkgs, ... }: 2let 3 caCert = nodes.acme.test-support.acme.caCert; 4 caDomain = nodes.acme.test-support.acme.caDomain; 5 6in { 7 security.acme = { 8 acceptTerms = true; 9 defaults = { 10 server = "https://${caDomain}/dir"; 11 email = "hostmaster@example.test"; 12 }; 13 }; 14 15 security.pki.certificateFiles = [ caCert ]; 16}