1 { pkgs, lib, config, ... }:
3 inherit (config) networking;
4 inherit (config.services) nginx;
8 ../../nixos/profiles/services/nginx.nix
9 nginx/sourcephile.fr.nix
11 users.groups."acme".members = [nginx.user];
12 networking.nftables.ruleset = ''
13 add rule inet filter net2fw tcp dport 80 counter accept comment "HTTP"
14 add rule inet filter net2fw tcp dport 443 counter accept comment "HTTPS"
18 package = pkgs.nginx.override {
19 modules = with pkgs.nginxModules; [
24 addresses = [ "127.0.0.1:53" ];
29 useACMEHost = networking.domain;