rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(web-servers): switch to staging letsencrypt

Browse source
This commit is contained in:
Mohammad Rafiq 2025-06-13 02:03:58 +08:00
parent 17dc383a97
commit 1912666242
No known key found for this signature in database
3 changed files with 4 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/nixos/server/web-servers/default.nix
View file

@ -14,10 +14,10 @@ in
acceptTerms = true; acceptTerms = true;
defaults = { defaults = {
inherit (config.system.mainUser) email; inherit (config.system.mainUser) email;
#TODO: switch back to production environment
server = "https://acme-staging-v02.api.letsencrypt.org/directory";
dnsProvider = "cloudflare"; dnsProvider = "cloudflare";
credentialFiles = { credentialFiles."CLOUDFLARE_DNS_API_TOKEN_FILE" = config.sops.secrets."keys/cloudflare".path;
"CLOUDFLARE_DNS_API_TOKEN_FILE" = config.sops.secrets."keys/cloudflare".path;
};
}; };
}; };
}) })

8
modules/nixos/server/web-servers/nginx/default.nix
View file

@ -52,18 +52,10 @@ in
extraConfig = lib.mkOption { extraConfig = lib.mkOption {
type = attrs; type = attrs;
default = { }; default = { };
description = "Will be added to locations.\"/\"";
}; };
}; };
}); });
default = [ ]; default = [ ];
example = [
{
source = "chat.bwfiq.com";
target = "http://helios:3080";
extraConfig = { };
}
];
}; };
}; };

1
systems/x86_64-linux/apollo/default.nix
View file

@ -32,6 +32,7 @@
mattermost.url = "mm.bwfiq.com"; mattermost.url = "mm.bwfiq.com";
}; };
web-servers = { web-servers = {
enableSSL = true;
nginx = { nginx = {
enable = true; enable = true;
proxies = [ proxies = [