mailserver: migrate to useACMEHost
Martin Weinelt committed
May 25, 2026 at 16:02 UTC
44bdb66708eb3740aaa4f2b8784dea9cab36e87e
1 file changed
+11
-1
non-critical-infra/modules/mailserver/default.nix
+11
-1
@@ -15,14 +15,24 @@
15
# enabled through systemd.network.enable
16
services.resolved.enable = false;
17
18
+ services.nginx = {
19
+ enable = true;
20
+ virtualHosts.${config.mailserver.fqdn} = {
21
+ enableACME = true;
22
+ forceSSL = true;
23
+ locations."/".return = "204";
24
+ };
25
+ };
26
+
27
mailserver = {
28
enable = true;
29
enableImap = false;
30
stateVersion = 3;
22
- certificateScheme = "acme-nginx";
31
32
fqdn = config.networking.fqdn;
33
34
+ x509.useACMEHost = config.mailserver.fqdn;
35
+
36
domains = [
37
"nixcon.org"
38
"nixos.org"