1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
{ nodes, lib, ... }: let inherit (nodes.acme.test-support.acme) caCert; inherit (nodes.acme.test-support.acme) caDomain; in { security = { acme = { acceptTerms = true; defaults = { server = "https://${caDomain}/dir"; }; }; pki = { certificateFiles = lib.mkForce [caCert]; }; }; }