[Nix-dev] Let's encrypt with lighttpd

[Khoi Nguyen]

Hi,

I'm new to NixOS and am trying (but failing) to get Let's Encrypt to 
generate certificates.

I have the following in my configuration.nix:

  acmeKeyDir = "/var/lib/acme/bknguyen.org";
  acmeWebRoot = "/var/lib/httpd/acme";

  ...

  security.acme.certs."bknguyen.org" = {
    email = "<myemail>";
    webroot = acmeWebRoot;
    postRun = "systemctl reload lighttpd.service";
  };

  services.lighttpd.extraConfig = ''
    $HTTP["url"] =~ "^/.well-known/acme-challenge" {
      server.document-root = "${acmeWebRoot}"
      alias.url = ( "/.well-known/acme-challenge" => "${acmeWebRoot}" )
      dir-listing.activate = "enable"
    }
  '';

However, after nixos-rebuild switch, acmeKeyDir is still empty.

Can anyone help me please?

Thanks!

-- 
Khoi