[makefu]

on nixos it is:

    services.nginx.virtualHosts."myhost.org" = {
        enableSSL = true;
        enableACME = true;
        root = "/var/www/myhost.org";
    }

Put that in your host configuration and the nginx will be configured to start up the nginx with SSL enabled. All other locations required for the acme request are automatically configured. Systemd timers are also added for automatic renewal. IMHO it does not get any better than this.

edit1: no extra location required

[Filligree]

More complex configurations are possible as well, of course:

https://github.com/Erisia/Madoka/blob/master/configuration.n...