thegeneralist01/config-new
1
Fork 0
Code Issues Pull requests Activity

site: add and force SSL

Browse source
This commit is contained in:
TheGeneralist 2025-06-27 21:19:22 +02:00
parent eae1c39468
commit 04bea73b6a
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4
4 changed files with 75 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
hosts/thegeneralist-central/acme/acmeEnvironment.age Normal file
View file

Binary file not shown.

24
hosts/thegeneralist-central/acme/default.nix Normal file
View file

@ -0,0 +1,24 @@
{ config, ... }: let
domain = "thegeneralist01.com";
in {
age.secrets.acmeEnvironment.file = ./acmeEnvironment.age;
security.acme = {
defaults = {
# Options: https://go-acme.github.io/lego/dns/
environmentFile = config.age.secrets.acmeEnvironment.path;
email = "thegeneralist01@proton.me";
dnsResolver = "1.1.1.1";
dnsProvider = "cloudflare";
};
certs.${domain} = {
extraDomainNames = [ "*.${domain}" ];
group = "acme";
};
acceptTerms = true;
};
users.groups.acme.members = [ "nginx" ];
}