rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(web-servers): switch to staging letsencrypt

Browse source
This commit is contained in:
Mohammad Rafiq 2025-06-13 02:03:58 +08:00
parent 17dc383a97
commit 1912666242
No known key found for this signature in database
3 changed files with 4 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/nixos/server/web-servers/default.nix
View file

@ -14,10 +14,10 @@ in
acceptTerms = true;
defaults = {
inherit (config.system.mainUser) email;
#TODO: switch back to production environment
server = "https://acme-staging-v02.api.letsencrypt.org/directory";
dnsProvider = "cloudflare";
credentialFiles = {
"CLOUDFLARE_DNS_API_TOKEN_FILE" = config.sops.secrets."keys/cloudflare".path;
};
credentialFiles."CLOUDFLARE_DNS_API_TOKEN_FILE" = config.sops.secrets."keys/cloudflare".path;
};
};
})

8
modules/nixos/server/web-servers/nginx/default.nix
View file

@ -52,18 +52,10 @@ in
extraConfig = lib.mkOption {
type = attrs;
default = { };
description = "Will be added to locations.\"/\"";
};
};
});
default = [ ];
example = [
{
source = "chat.bwfiq.com";
target = "http://helios:3080";
extraConfig = { };
}
];
};
};

1
systems/x86_64-linux/apollo/default.nix
View file

@ -32,6 +32,7 @@
mattermost.url = "mm.bwfiq.com";
};
web-servers = {
enableSSL = true;
nginx = {
enable = true;
proxies = [