sys/ns: enable acme-dns for DNS-01 challenges

1 files changed, 12 insertions, 0 deletions

diff --git a/sys/ns/ns.nix b/sys/ns/ns.nix
index a1b1605..1e74502 100644
--- a/sys/ns/ns.nix
+++ b/sys/ns/ns.nix
@@ -21,6 +21,11 @@ in
             options.localNS = {
               enable = mkEnableOption "local NS settings";
 
+              acme = mkOption {
+                default = { };
+                type = attrsOf str;
+              };
+
               ptrNet = {
                 v4 = mkOption {
                   type = nullOr str;
@@ -90,6 +95,13 @@ in
                 soa = mkIf ptrDomain {
                   authorityZone = mkDefault "${domain}.";
                 };
+
+                cname = mapAttrsToList
+                  (name: id: {
+                    name = "_acme-challenge" + optionalString (name != "@") ".${name}";
+                    target = "${id}.acme-challenge.${domain}.";
+                  })
+                  cfg.acme;
               };
           }));
   };