From 982d2886e465baf403e2f3cd007a3e8b0c15a3e8 Mon Sep 17 00:00:00 2001
From: Dan <dleink@gmail.com>
Date: Tue, 21 Oct 2025 18:34:13 -0700
Subject: [PATCH] Add ACME configuration for Let's Encrypt certificates

- Accept Let's Encrypt terms of service
- Configure email for certificate notifications (dlei@duck.com)
- Nginx virtual hosts already configured with enableACME and forceSSL

Ready for deployment to VPS.
---
 configuration.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/configuration.nix b/configuration.nix
index 223689e..9283c0a 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -49,6 +49,12 @@
     allowedTCPPorts = [ 22 80 443 ];  # SSH, HTTP, HTTPS
   };
 
+  # ACME for Let's Encrypt certificates
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "dlei@duck.com";
+  };
+
   # This value determines the NixOS release compatibility
   system.stateVersion = "24.05";
 }