From 0510e56534dd1a784022835f3b89924db63843ed Mon Sep 17 00:00:00 2001
From: kurogeek <kurogeek@lmvhaus.com>
Date: Wed, 16 Jul 2025 14:16:42 +0700
Subject: [PATCH] enable ACME on main domain

---
 machines/b4l/configuration.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/machines/b4l/configuration.nix b/machines/b4l/configuration.nix
index f927e1a..574ae61 100644
--- a/machines/b4l/configuration.nix
+++ b/machines/b4l/configuration.nix
@@ -1,3 +1,4 @@
+{ config, ... }:
 {
   imports = [
 
@@ -12,4 +13,9 @@
   networking.fqdn = "b4l.co.th";
   system.stateVersion = "25.11";
 
+  security.acme.defaults.email = "admin@b4l.co.th";
+  security.acme.acceptTerms = true;
+  services.nginx.virtualHosts."${config.networking.fqdn}" = {
+    enableACME = true;
+  };
 }