SelfPrivacy/selfprivacy-nixos-infect
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-infect.git synced 2024-11-22 12:01:27 +00:00
Code Issues Projects Releases Wiki Activity

Added certificate resolution redundancy. Implemented nginx config reload on resolve success

Browse source
This commit is contained in:
Illia Chub 2021-03-31 10:47:21 +03:00
parent 9d6c8cc638
commit cfdee451dd
1 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
nixos-infect
View file

@ -48,6 +48,7 @@ makeConf() {
./social/pleroma-module.nix ./social/pleroma-module.nix
./social/pleroma.nix ./social/pleroma.nix
./letsencrypt/acme.nix ./letsencrypt/acme.nix
./letsencrypt/resolve.nix
./backup/restic.nix ./backup/restic.nix
./passmgr/bitwarden.nix ./passmgr/bitwarden.nix
./webserver/nginx.nix ./webserver/nginx.nix
@ -254,6 +255,27 @@ EOF
}; };
}; };
} }
EOF
cat > /etc/nixos/letsencrypt/resolve.nix << EOF
{ pkgs, ... }:
{
systemd = {
services = {
"acme-$DOMAIN" = {
serviceConfig = {
StartLimitBurst = 5;
StartLimitIntervalSec = 5;
Restart = "on-failure";
};
};
"nginx-config-reload" = {
serviceConfig = {
After = [ "acme-$DOMAIN.service" ];
};
};
};
};
}
EOF EOF
cat > /etc/nixos/backup/restic.nix << EOF cat > /etc/nixos/backup/restic.nix << EOF
@ -311,6 +333,7 @@ EOF
{ {
services.nginx = { services.nginx = {
enable = true; enable = true;
enableReload = true;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;