add mailserver acme setup

2025-12-20 14:31:55 +03:00 · 2025-12-20 14:31:55 +03:00 · 28bca23b69
commit 28bca23b69
parent e61fb86afc
1 changed files with 12 additions and 0 deletions
--- a/modules/nixos/services/mailserver.nix
+++ b/modules/nixos/services/mailserver.nix
@ -50,6 +50,18 @@
      };
    })

+    # Configure ACME certificate via nginx
+    (lib.mkIf
+      (config.osbmModules.services.nginx.enable && config.osbmModules.services.mailserver.enable)
+      {
+        services.nginx.virtualHosts."${config.mailserver.fqdn}" = {
+          forceSSL = true;
+          enableACME = true;
+          locations."/".return = "404"; # Just for ACME, no actual web content
+        };
+      }
+    )
+
    # mailserver and impermanence
    (lib.mkIf
      (