services.maddy.tls.loader

TLS certificates are obtained by modules called "certificate loaders".

The file loader module reads certificates from files specified by the certificates option.

Alternatively the acme module can be used to automatically obtain certificates using the ACME protocol.

Module configuration is done via the tls.extraConfig option.

Secrets such as API keys or passwords should not be supplied in plaintext. Instead the secrets option can be used to read secrets at runtime as environment variables. Secrets can be referenced with {env:VAR}.

Type

null or one of "off", "file", "acme"

Default

"off"

Declared

<nixpkgs/nixos/modules/services/mail/maddy.nix>