hosts/mermet/nginx/autogeree.net.nix

   1 { pkgs, lib, config, ... }:
   2 let domain = "autogeree.net"; in
   3 {
   4 imports = map (m: import m {inherit domain;}) [
   5   autogeree.net/www.nix
   6 ];
   7 security.acme.certs."${domain}" = {
   8   postRun = "systemctl reload nginx";
   9 };
  10 systemd.services.nginx.serviceConfig = {
  11   UMask = "0066";
  12 };
  13 systemd.services.nginx = {
  14   wants = [ "acme-selfsigned-${domain}.service" "acme-${domain}.service"];
  15   after = [ "acme-selfsigned-${domain}.service" ];
  16 };
  17 }