| # SPDX-FileCopyrightText: 2024 Auxolotl Infrastructure Contributors |
| # SPDX-FileCopyrightText: 2024 Clicks Codes |
| # SPDX-License-Identifier: GPL-3.0-only |
| cfg = config.clicks.security.acme; |
| options.clicks.security.acme = { |
| enable = lib.mkEnableOption "Acme defaults"; |
| description = "Email address to use for Let's Encrypt registration."; |
| description = "Use the Let's Encrypt staging server."; |
| config = lib.mkIf cfg.enable { |
| group = lib.mkIf config.services.nginx.enable "nginx"; |
| server = lib.mkIf cfg.staging "https://acme-staging-v02.api.letsencrypt.org/directory"; |
| # Reload nginx when certs change. |
| reloadServices = lib.optional config.services.nginx.enable "nginx.service"; |