sys/nspawn/dmz: add imap domain for ACME

1 files changed, 11 insertions, 0 deletions

diff --git a/sys/nspawn/dmz.nix b/sys/nspawn/dmz.nix
index 3e0ff64..f1f1cc8 100644
--- a/sys/nspawn/dmz.nix
+++ b/sys/nspawn/dmz.nix
@@ -125,6 +125,17 @@ in
                     pkgs = mkDefault pkgs;
                     localSystem = mkDefault pkgs.stdenv.hostPlatform;
                   };
+
+                  services.nginx.virtualHosts = {
+                    "${config.local.domains.imap.main}".locations."^~ /.well-known/acme-challenge/" = {
+                      root = "/var/lib/acme/acme-challenge";
+
+                      extraConfig = ''
+                        auth_basic off;
+                        auth_request off;
+                      '';
+                    };
+                  };
                 };
               };
             in