cert stuff

This commit is contained in:
2026-05-24 23:22:42 -05:00
parent 0fbbb0d256
commit 86dc97270a
+2 -7
View File
@@ -73,9 +73,9 @@ in
acceptTerms = true; acceptTerms = true;
defaults = { defaults = {
# use staging for testing # use staging for testing
# server = "https://acme-staging-v02.api.letsencrypt.org/directory"; server = "https://acme-staging-v02.api.letsencrypt.org/directory";
# use prod for deploy # use prod for deploy
server = "https://acme-v02.api.letsencrypt.org/directory"; # server = "https://acme-v02.api.letsencrypt.org/directory";
email = "roydumblauskas@gmail.com"; email = "roydumblauskas@gmail.com";
dnsProvider = "cloudflare"; dnsProvider = "cloudflare";
# When the service CHECKS to see if certs are near expiry (< 30 days) # When the service CHECKS to see if certs are near expiry (< 30 days)
@@ -85,7 +85,6 @@ in
CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path; CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path;
}; };
}; };
# only generate for static site
certs = { certs = {
"roypository.com" = { "roypository.com" = {
domain = "*.roypository.com"; domain = "*.roypository.com";
@@ -99,7 +98,6 @@ in
# through k3s traefic # through k3s traefic
services.nginx = { services.nginx = {
enable = true; enable = true;
logError = "stderr";
virtualHosts."nimh.roypository.com" = { virtualHosts."nimh.roypository.com" = {
forceSSL = true; forceSSL = true;
@@ -108,9 +106,6 @@ in
locations."/" = { locations."/" = {
root = nimhStaticSite; root = nimhStaticSite;
index = "index.html"; index = "index.html";
extraConfig = ''
autoindex off;
'';
}; };
}; };
}; };