steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

containers/webserver: use ACME for cert generation

Browse source
This commit is contained in:
steveej 2021-01-01 12:00:48 +01:00
parent 406ab7be7e
commit d742a504f0
1 changed files with 12 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

15
nix/os/containers/webserver.nix
View file

@ -14,14 +14,23 @@
domain = "www.stefanjunker.de"; domain = "www.stefanjunker.de";
}; };
security.acme = {
acceptTerms = true;
certs."www.stefanjunker.de".email = "mail@stefanjunker.de";
};
services.nginx.enable = true; services.nginx.enable = true;
services.nginx.virtualHosts."stefanjunker.de" = { services.nginx.virtualHosts."www.stefanjunker.de" = {
default = true; default = true;
onlySSL = true; onlySSL = true;
root = "/var/www/stefanjunker.de/htdocs"; root = "/var/www/stefanjunker.de/htdocs";
sslCertificate = "/etc/secrets/stefanjunker.de/nginx/nginx.crt"; enableACME = true;
sslCertificateKey = "/etc/secrets/stefanjunker.de/nginx/nginx.key"; serverAliases = [
"stefanjunker.de"
];
# sslCertificate = "/etc/secrets/stefanjunker.de/nginx/nginx.crt";
# sslCertificateKey = "/etc/secrets/stefanjunker.de/nginx/nginx.key";
locations."/fi" = { locations."/fi" = {
index = "index.php"; index = "index.php";