Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ma bgt: enable acme with cloudflare

Browse Source
This commit is contained in:
makefu 2022-08-29 21:12:21 +02:00
parent a10998a860
commit 12cbc5ed1e
No known key found for this signature in database
GPG Key ID: 36F7711F3FC0F225
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
makefu/2configs/bgt/download.binaergewitter.de.nix
View File

@ -59,6 +59,11 @@ in {
systemd.services.nginx.serviceConfig.ReadWritePaths = [
"/var/spool/nginx/logs/"
];
security.acme.certs."download.binaergewitter.de" = {
dnsProvider = "cloudflare";
credentialsFile = toString <secrets/lego-binaergewitter>;
webroot = lib.mkForce null;
};
services.nginx = {
appendHttpConfig = ''
@ -70,6 +75,8 @@ in {
recommendedGzipSettings = true;
recommendedOptimisation = true;
virtualHosts."download.binaergewitter.de" = {
enableSSL = true;
enableACME = true;
serverAliases = [ "dl2.binaergewitter.de" ];
root = "/var/www/binaergewitter";
extraConfig = ''