Nixos Nginx ACME ssl certificates for multiple domains

[Sandro]

@gspia

I also added openssl to systemPackages , but I’m not sure if that is required (I didn’t want to try anymore - when trying out these with a single domains, I got a feeling that it is required).

no, it isn’t.

@gspia

Another thought: it would be cool if there were a possibility to utilize the staging certificate service when trying to find a new configuration settings. Or is it possible already? (I run into that 1 hour limit quite many times and that staging would help with that.)

security.acme.defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";

@gspia

• Separate virtual host sections for https for both domains, as well as separate sections for http for the http cert renewals together with redirections to https for everything else

That is not required. You only need to set forceSSL and useACMEHost for the vhost and configure security.acme then you are done.

---

@drupol

when I see stuff with NGinx and HTTPS

This is not hard at all if you have a basic understanding of nginx.
Caddy won’t magically solve all your problems especially if you are not very familiar what you need to do to configure a web server.