coolneng/zion
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use DNS-01 for ACME

Browse Source
This commit is contained in:
coolneng 2025-02-28 04:15:14 +01:00
parent 0b3e10fd70
commit 45562df6cf
Signed by: coolneng
GPG Key ID: 9893DA236405AF57
4 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
configuration.nix
View File

@ -209,6 +209,11 @@ with pkgs;
owner = "matrix-as-signal"; owner = "matrix-as-signal";
group = "matrix-as-signal"; group = "matrix-as-signal";
}; };
secrets.acme = {
file = secrets/acme.age;
owner = "acme";
group = "nginx";
};
identityPaths = [ "/etc/ssh/id_ed25519" ]; identityPaths = [ "/etc/ssh/id_ed25519" ];
}; };

11
modules/webstack.nix
View File

@ -175,14 +175,13 @@
acceptTerms = true; acceptTerms = true;
defaults = { defaults = {
email = "akasroua@disroot.org"; email = "akasroua@disroot.org";
dnsResolver = "127.0.0.1:53";
group = "nginx"; group = "nginx";
webroot = "/var/lib/acme/acme-challenge";
ocspMustStaple = true;
}; };
certs."coolneng.duckdns.org".extraDomainNames = lib.attrsets.mapAttrsToList ( certs."coolneng.duckdns.org" = {
name: value: "${name}" domain = "*.coolneng.duckdns.org";
) config.services.nginx.virtualHosts; dnsProvider = "duckdns";
environmentFile = config.age.secrets.acme.path;
};
}; };
# Generate dhparams # Generate dhparams

BIN
secrets/acme.age Normal file
View File

Binary file not shown.

1
secrets/secrets.nix
View File

@ -16,4 +16,5 @@ in
"mqtt-receiver.age".publicKeys = [ zion ]; "mqtt-receiver.age".publicKeys = [ zion ];
"facebook.age".publicKeys = [ zion ]; "facebook.age".publicKeys = [ zion ];
"signal.age".publicKeys = [ zion ]; "signal.age".publicKeys = [ zion ];
"acme.age".publicKeys = [ zion ];
} }