···

       
140
       
140
       
 
       
        '';

     

       
141
       
141
       
 
       
      };

     

       
142
       
142
       
 
       


     

       
143
       
143
       
-
       
      tosHash = mkOption {

     

       
144
       
144
       
-
       
        type = types.string;

     

       
145
       
145
       
-
       
        default = "cc88d8d9517f490191401e7b54e9ffd12a2b9082ec7a1d4cec6101f9f1647e7b";

     

       
146
       
146
       
-
       
        description = ''

     

       
147
       
147
       
-
       
          SHA256 of the Terms of Services document. This changes once in a while.

     

       
148
       
148
       
-
       
        '';

     

       
149
       
149
       
-
       
      };

     

       
150
       
150
       
-
       


     

       
151
       
143
       
 
       
      production = mkOption {

     

       
152
       
144
       
 
       
        type = types.bool;

     

       
153
       
145
       
 
       
        default = true;

     
···

       
196
       
188
       
 
       
              let

     

       
197
       
189
       
 
       
                cpath = "${cfg.directory}/${cert}";

     

       
198
       
190
       
 
       
                rights = if data.allowKeysForGroup then "750" else "700";

     

       
199
       
199
       
-
       
                cmdline = [ "-v" "-d" data.domain "--default_root" data.webroot "--valid_min" cfg.validMin "--tos_sha256" cfg.tosHash ]

     

       
191
       
191
       
+
       
                cmdline = [ "-v" "-d" data.domain "--default_root" data.webroot "--valid_min" cfg.validMin ]

     

       
200
       
192
       
 
       
                          ++ optionals (data.email != null) [ "--email" data.email ]

     

       
201
       
193
       
 
       
                          ++ concatMap (p: [ "-f" p ]) data.plugins

     

       
202
       
194
       
 
       
                          ++ concatLists (mapAttrsToList (name: root: [ "-d" (if root == null then name else "${name}:${root}")]) data.extraDomains)