cert stuff
This commit is contained in:
@@ -73,9 +73,9 @@ in
|
|||||||
acceptTerms = true;
|
acceptTerms = true;
|
||||||
defaults = {
|
defaults = {
|
||||||
# use staging for testing
|
# use staging for testing
|
||||||
# server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
||||||
# use prod for deploy
|
# use prod for deploy
|
||||||
server = "https://acme-v02.api.letsencrypt.org/directory";
|
# server = "https://acme-v02.api.letsencrypt.org/directory";
|
||||||
email = "roydumblauskas@gmail.com";
|
email = "roydumblauskas@gmail.com";
|
||||||
dnsProvider = "cloudflare";
|
dnsProvider = "cloudflare";
|
||||||
# When the service CHECKS to see if certs are near expiry (< 30 days)
|
# When the service CHECKS to see if certs are near expiry (< 30 days)
|
||||||
@@ -85,7 +85,6 @@ in
|
|||||||
CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path;
|
CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
# only generate for static site
|
|
||||||
certs = {
|
certs = {
|
||||||
"roypository.com" = {
|
"roypository.com" = {
|
||||||
domain = "*.roypository.com";
|
domain = "*.roypository.com";
|
||||||
@@ -99,7 +98,6 @@ in
|
|||||||
# through k3s traefic
|
# through k3s traefic
|
||||||
services.nginx = {
|
services.nginx = {
|
||||||
enable = true;
|
enable = true;
|
||||||
logError = "stderr";
|
|
||||||
|
|
||||||
virtualHosts."nimh.roypository.com" = {
|
virtualHosts."nimh.roypository.com" = {
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
@@ -108,9 +106,6 @@ in
|
|||||||
locations."/" = {
|
locations."/" = {
|
||||||
root = nimhStaticSite;
|
root = nimhStaticSite;
|
||||||
index = "index.html";
|
index = "index.html";
|
||||||
extraConfig = ''
|
|
||||||
autoindex off;
|
|
||||||
'';
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user