Revert "use enableACME for all virtualHosts"

This reverts commit 46366702bc.
2023-12-19 23:46:42 +04:00
parent 46366702bc
commit c18f332f5f
10 changed files with 30 additions and 12 deletions
--- a/letsencrypt/acme.nix
+++ b/letsencrypt/acme.nix
@@ -25,8 +25,15 @@ in
      dnsPropagationCheck =
        ! (lib.elem cfg.dns.provider dnsPropagationCheckExceptions);
      reloadServices = [ "nginx" ];
-      dnsProvider = lib.strings.toLower cfg.dns.provider;
-      credentialsFile = acme-env-filepath;
+    };
+    certs = lib.mkForce {
+      "${cfg.domain}" = {
+        domain = "*.${cfg.domain}";
+        extraDomainNames = [ "${cfg.domain}" ];
+        group = "acmereceivers";
+        dnsProvider = lib.strings.toLower cfg.dns.provider;
+        credentialsFile = acme-env-filepath;
+      };
    };
  };
  systemd.services.acme-secrets = {