···189189security.acme.certs."example.com" = {
190190 domain = "*.example.com";
191191 dnsProvider = "rfc2136";
192192- credentialsFile = "/var/lib/secrets/certs.secret";
192192+ environmentFile = "/var/lib/secrets/certs.secret";
193193 # We don't need to wait for propagation since this is a local DNS server
194194 dnsPropagationCheck = false;
195195};
···256256security.acme.defaults.email = "admin+acme@example.com";
257257security.acme.defaults = {
258258 dnsProvider = "rfc2136";
259259- credentialsFile = "/var/lib/secrets/certs.secret";
259259+ environmentFile = "/var/lib/secrets/certs.secret";
260260 # We don't need to wait for propagation since this is a local DNS server
261261 dnsPropagationCheck = false;
262262};
+8-4
nixos/modules/security/acme/default.nix
···362362 "/var/lib/acme/.lego/${cert}/${certDir}:/tmp/certificates"
363363 ];
364364365365- # Only try loading the credentialsFile if the dns challenge is enabled
366366- EnvironmentFile = mkIf useDns data.credentialsFile;
365365+ # Only try loading the environmentFile if the dns challenge is enabled
366366+ EnvironmentFile = mkIf useDns data.environmentFile;
367367368368 Environment = mkIf useDns
369369 (mapAttrsToList (k: v: ''"${k}=%d/${k}"'') data.credentialFiles);
···502502 defaultText = if isDefaults then default else literalExpression "config.security.acme.defaults.${name}";
503503 };
504504 in {
505505+ imports = [
506506+ (mkRenamedOptionModule [ "credentialsFile" ] [ "environmentFile" ])
507507+ ];
508508+505509 options = {
506510 validMinDays = mkOption {
507511 type = types.int;
···613617 '';
614618 };
615619616616- credentialsFile = mkOption {
620620+ environmentFile = mkOption {
617621 type = types.nullOr types.path;
618618- inherit (defaultAndText "credentialsFile" null) default defaultText;
622622+ inherit (defaultAndText "environmentFile" null) default defaultText;
619623 description = lib.mdDoc ''
620624 Path to an EnvironmentFile for the cert's service containing any required and
621625 optional environment variables for your selected dnsProvider.