ACME: Difference between revisions

@@ Line 1: / Line 1: @@
-NixOS supports automatic domain validation & certificate retrieval and renewal using the ACME protocol. Any provider can be used, but by default NixOS uses Let's Encrypt. The alternative ACME client [https://go-acme.github.io/lego/ lego] is used under the hood.
+NixOS 支持通过 ACME 协议实现自动域名验证、证书获取及续期。可以使用任何服务提供商，但 NixOS 默认使用 Let's Encrypt。底层使用的是替代 ACME 客户端 lego。
 == Setup ==
 === DNS-01 Challenge ===
-Following example setup generates certificates using DNS validation. [https://letsencrypt.org/repository/ Let's Encrypt ToS] has to be accepted. Further the contact mail <code>admin+acme@example.com</code> is defined.
+下面的示例设置通过DNS验证生成证书。需接受 [https://letsencrypt.org/repository/ Let's Encrypt ToS] 的服务条款（ToS）。同时，指定联系邮箱为<code>admin+acme@example.com</code>。
 <syntaxhighlight lang="nix">