1{ lib, nodes, pkgs, ... }:
2let
3 caCert = nodes.acme.test-support.acme.caCert;
4 caDomain = nodes.acme.test-support.acme.caDomain;
5
6in {
7 security.acme = {
8 acceptTerms = true;
9 defaults = {
10 server = "https://${caDomain}/dir";
11 email = "hostmaster@example.test";
12 };
13 };
14
15 security.pki.certificateFiles = [ caCert ];
16}