SelfPrivacy/selfprivacy-nixos-config
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git synced 2025-01-08 17:11:02 +00:00
Code Issues Projects Releases Wiki Activity

fix: Split wildcard and root domains for ACME

Browse source
This commit is contained in:
Inex Code 2024-09-07 00:14:20 +03:00
parent 30e4f0a2cc
commit aeeca9ce84
2 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
letsencrypt/acme.nix
View file

@ -33,7 +33,6 @@ in
certs = { certs = {
"${cfg.domain}" = { "${cfg.domain}" = {
domain = "*.${cfg.domain}"; domain = "*.${cfg.domain}";
extraDomainNames = [ "${cfg.domain}" ];
group = "acmereceivers"; group = "acmereceivers";
dnsProvider = lib.strings.toLower cfg.dns.provider; dnsProvider = lib.strings.toLower cfg.dns.provider;
credentialsFile = acme-env-filepath; credentialsFile = acme-env-filepath;

2
webserver/nginx.nix
View file

@ -21,7 +21,7 @@ in
''; '';
virtualHosts = { virtualHosts = {
"${domain}" = { "${domain}" = {
useACMEHost = domain; enableACME = true;
forceSSL = true; forceSSL = true;
extraConfig = '' extraConfig = ''
add_header Strict-Transport-Security $hsts_header; add_header Strict-Transport-Security $hsts_header;