ACME: Difference between revisions
Scotch7881 (talk | contribs) mNo edit summary |
Scotch7881 (talk | contribs) Undo revision 23637 by Scotch7881 (talk) Tag: Undo |
||
| Line 1: | Line 1: | ||
NixOS | NixOS supports automatic domain validation & certificate retrieval and renewal using the ACME protocol. Any provider can be used, but by default NixOS uses Let's Encrypt. The alternative ACME client [https://go-acme.github.io/lego/ lego] is used under the hood. | ||
== Setup == | == Setup == | ||
=== DNS-01 Challenge === | === DNS-01 Challenge === | ||
Following example setup generates certificates using DNS validation. [https://letsencrypt.org/repository/ Let's Encrypt ToS] has to be accepted. Further the contact mail <code>admin+acme@example.com</code> is defined. | |||
<syntaxhighlight lang="nix"> | <syntaxhighlight lang="nix"> | ||