acme: init

This commit is contained in:
Bloxx12 2025-05-22 09:44:38 +02:00
commit a20746490a
Signed by: faukah
SSH key fingerprint: SHA256:Uj2AXqvtdCA4hn5Hq0ZonhIAyUqI1q4w2sMG3Z1TH7E
2 changed files with 48 additions and 14 deletions

View file

@ -43,20 +43,20 @@ in {
};
};
security.acme = let
email = "charlie@charlieroot.dev";
in {
# testing server, do not use in production, but DO use it for setting things up.
# it has much higher rate limits.
# defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
certs = {
${domain} = {
webroot = acmeRoot;
inherit email;
group = "nginx";
};
};
};
# security.acme = let
# email = "charlie@charlieroot.dev";
# in {
# # testing server, do not use in production, but DO use it for setting things up.
# # it has much higher rate limits.
# # defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
# certs = {
# ${domain} = {
# webroot = acmeRoot;
# inherit email;
# group = "nginx";
# };
# };
# };
# create the git user for forgejo
# NOTE: this is important and it will _not_ work otherwise.