Added acme

nginx.nix

@@ -13,6 +13,19 @@
     };
   };
 
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "kyren223@proton.me";
+    certs."kyren.codes" = {
+      extraDomainNames = [ "*.kyren.codes" ];
+      webroot = null;
+      dnsProvider = "cloudflare";
+      environmentFile = "${pkgs.writeText "cf-creds" ''
+        CF_DNS_API_TOKEN_FILE=/run/secrets/cloudflare-dns-api-token
+      ''}";
+    };
+  };
+
   networking.firewall.allowedTCPPorts = [ 80 ];
 }
 # { pkgs, ... }: {