In reply to @os:matrix.flyingcircus.io
Hi, it's me again with some weird edge cases in the acme management outcomes. Today: adding or removing acme-enabled vhosts in nginx causes the service to be restarted 😬

Hello, I am trying to setup my homelab using NixOS, but I am facing some problems with using my domain to acces my services, and adding ssl certs to my services.

This is my setup:

sops.secrets."MacBook-Pro-8-1/cloudflare-credentials" = {};
  security.acme = {
    acceptTerms = true;
    defaults.email = "nakibrayan@disroot.org";
    certs = {
      "transmission.homelab.nakibrayan.com" = {
        dnsProvider = "cloudflare";
        environmentFile = config.sops.secrets."MacBook-Pro-8-1/cloudflare-credentials".path;
        webroot = null;
      };
    };
  };

services.nginx = {
    enable = true;
    recommendedTlsSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = false;
    recommendedGzipSettings = true;
    recommendedZstdSettings = false;
    recommendedBrotliSettings = false;
  };

{config, ...}: {
  environment.persistence."/persistent".directories = ["/var/lib/transmission"];

  services.nginx.virtualHosts."transmission.homelab.nakibrayan.com" = {
    enableACME = true;
    locations."/".proxyPass = "http://127.0.0.1:9091";
  };

  services.transmission = {
    enable = true;
    openRPCPort = true;
    settings = {
      rpc-bind-address = "0.0.0.0";
      rpc-whitelist = "127.0.0.1,192.168.*.*";
    };
  };
}

But when I can't acces my services through https://transmission.homelab.nakibrayan.com

And when I don't set webroot = null; in ACME config, I get this error:

error:
┃        Failed assertions:
┃        - Exactly one of the options
┃        `security.acme.certs.transmission.homelab.nakibrayan.com.dnsProvider`,
┃        `security.acme.certs.transmission.homelab.nakibrayan.com.webroot`,
┃        `security.acme.certs.transmission.homelab.nakibrayan.com.listenHTTP` and
┃        `security.acme.certs.transmission.homelab.nakibrayan.com.s3Bucket`
┃        is required.
┃        Current values: {
┃          dnsProvider = "cloudflare";
┃          listenHTTP = null;
┃          s3Bucket = null;
┃          webroot = "/var/lib/acme/acme-challenge";