From e40c7f82d9478199441b17a7c14de449da4fe427 Mon Sep 17 00:00:00 2001
From: Emmanuel Beffara <manu@beffara.org>
Date: Wed, 17 Mar 2021 10:35:36 +0100
Subject: [PATCH] Use Let's Encrypt for SSL certificates

---
 configuration.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index af9afa1..151cb9e 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -39,6 +39,12 @@
     passwordAuthentication = false;
   };
 
+  # Let's Encrypt certificates
+  security.acme = {
+    acceptTerms = true;
+    email = "manu@beffara.org";
+  };
+
   # Nginx web server
   services.nginx = {
     enable = true;
@@ -46,8 +52,7 @@
       default = true;
       forceSSL = true;
       root = "/data/web/root";
-      sslCertificate = "/data/web/cert/beffara.org.crt";
-      sslCertificateKey = "/data/web/cert/beffara.org.key";
+      enableACME = true;
 
       locations."/owncloud/" = {
         alias = "/data/web/nextcloud/site/";