Set ACME client defaults in server.nix

2024-05-17 23:01:07 +01:00
parent b16a42732a
commit 92c3bd3a13
3 changed files with 8 additions and 13 deletions
--- a/hosts/server.nix
+++ b/hosts/server.nix
@ -10,7 +10,14 @@
  fonts.fontconfig.enable = false;

  security = {
-    acme.acceptTerms = true;
+    acme = {
+      acceptTerms = true;
+      defaults = {
+        email = "hostmaster@vimium.com";
+        group = "nginx";
+        webroot = "/var/lib/acme/acme-challenge";
+      };
+    };
    auditd.enable = true;
    audit = {
      enable = true;