lgmrszd/nix-cfg
1
0
Fork 0
mirror of https://git.lgmrszd.xyz/Lgmrszd/nix-cfg.git synced 2025-12-13 23:28:20 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use DNS validation

Browse source
This commit is contained in:
Lgmrszd 2024-02-18 15:36:52 +03:00
parent c96a0534aa
commit 4d4bdbefec
No known key found for this signature in database
GPG key ID: 9396B8BA6FBB14DE
4 changed files with 32 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

18
hosts/vps1/configuration.nix
View file

@ -95,6 +95,10 @@ in
owner = config.users.users.akkoma.name;
group = config.users.users.akkoma.group;
};
secrets.porkbun = {
sopsFile = ../../secrets/porkbun.env;
format = "dotenv";
};
};
users.users.nginx.extraGroups = [ "acme" ];
@ -111,7 +115,7 @@ in
};
virtualHosts.${rootDomain} = {
onlySSL = true;
enableACME = true;
useACMEHost = "${rootDomain}";
root = "/var/www/todo";
};
virtualHosts.${gtnhDomain} = {
@ -140,11 +144,15 @@ in
acceptTerms = true;
defaults.email = "lgmrszd@disroot.org";
certs.${rootDomain} = {
# domain = "*.${rootDomain}";
dnsProvider = "porkbun";
environmentFile = config.sops.secrets.porkbun.path;
extraDomainNames = [
gtnhDomain
akkoDomain
iceDomain
discDomain
"*.${rootDomain}"
# gtnhDomain
# akkoDomain
# iceDomain
# discDomain
];
};
};