hosts/atlas+p-body: use cloudflare dns for acme

2 files changed, 7 insertions, 6 deletions

diff --git a/hosts/atlas/nginx.nix b/hosts/atlas/nginx.nix
index b6b2fe7..1e2a349 100644
--- a/hosts/atlas/nginx.nix
+++ b/hosts/atlas/nginx.nix
@@ -1,9 +1,14 @@
 {config, ...}: {
+  getchoo.server.acme.enable = true;
   networking.firewall.allowedTCPPorts = [443];
 
   security.acme = {
     acceptTerms = true;
-    defaults.email = "[email protected]";
+    defaults = {
+      email = "[email protected]";
+      dnsProvider = "cloudflare";
+      credentialsFile = config.age.secrets.cloudflareApiKey.path;
+    };
   };
 
   services.nginx = {
diff --git a/hosts/p-body/nginx.nix b/hosts/p-body/nginx.nix
index 3390f89..b2dae30 100644
--- a/hosts/p-body/nginx.nix
+++ b/hosts/p-body/nginx.nix
@@ -1,13 +1,9 @@
 {config, ...}: let
   inherit (config.networking) domain;
 in {
+  getchoo.server.acme.enable = true;
   networking.firewall.allowedTCPPorts = [443];
 
-  security.acme = {
-    acceptTerms = true;
-    defaults.email = "[email protected]";
-  };
-
   services.nginx = {
     enable = true;