use wildcard cert
This commit is contained in:
@@ -183,8 +183,8 @@ EOF
|
|||||||
enable = true;
|
enable = true;
|
||||||
virtualHosts.${opts.default-nginx.hostname} = {
|
virtualHosts.${opts.default-nginx.hostname} = {
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
enableACME = true;
|
# Parse TLD from hostname to use wildcard cert
|
||||||
acmeRoot = null;
|
useACMEHost = (domain: let parts = lib.strings.split "." domain; len = builtins.length parts; in if len>=2 then lib.strings.concatStringsSep "." (lib.lists.drop (len - 2) parts) else domain) "${opts.default-nginx.hostname}";
|
||||||
|
|
||||||
# This does not work even with the MINIO_BROWSER_REDIRECT_URL set
|
# This does not work even with the MINIO_BROWSER_REDIRECT_URL set
|
||||||
locations."/console" = {
|
locations."/console" = {
|
||||||
|
|||||||
@@ -51,7 +51,7 @@
|
|||||||
security.acme = {
|
security.acme = {
|
||||||
acceptTerms = true;
|
acceptTerms = true;
|
||||||
defaults = {
|
defaults = {
|
||||||
# use staging testing
|
# use staging for testing
|
||||||
server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
||||||
# use prod for deploy
|
# use prod for deploy
|
||||||
# server = "https://acme-v02.api.letsencrypt.org/directory";
|
# server = "https://acme-v02.api.letsencrypt.org/directory";
|
||||||
|
|||||||
Reference in New Issue
Block a user