l neoprism.r: add nginx with acme

2023-01-26 16:15:49 +01:00 · 2023-01-26 16:15:49 +01:00 · 30599f5f60
commit 30599f5f60
parent ab06eab6af
1 changed files with 5 additions and 0 deletions
--- a/lass/1systems/neoprism/config.nix
+++ b/lass/1systems/neoprism/config.nix
@ -16,4 +16,9 @@
  ];

  krebs.build.host = config.krebs.hosts.neoprism;
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  services.nginx.enable = true;
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "acme@lassul.us";
 }