diff options
| author | Franck Cuny <franck@fcuny.net> | 2026-01-01 09:29:35 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2026-01-01 09:29:35 -0800 |
| commit | d9768ec54e5b7820bb7bf3af5ddd91419349c6d3 (patch) | |
| tree | 6f54f61c82b0f7f57503cdc1b837473b7c1c38f4 /profiles/reverse-proxy.nix | |
| parent | don't configure jovian just yet (diff) | |
| download | infra-d9768ec54e5b7820bb7bf3af5ddd91419349c6d3.tar.gz | |
combine acme and reverse proxy configuration
Diffstat (limited to 'profiles/reverse-proxy.nix')
| -rw-r--r-- | profiles/reverse-proxy.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/profiles/reverse-proxy.nix b/profiles/reverse-proxy.nix index daf2ecb..45b42f5 100644 --- a/profiles/reverse-proxy.nix +++ b/profiles/reverse-proxy.nix @@ -1,6 +1,7 @@ { pkgs, lib, + config, ... }: let @@ -35,6 +36,14 @@ in 443 ]; + security.acme.acceptTerms = true; + security.acme.defaults = { + email = "franck@fcuny.net"; + dnsResolver = "1.1.1.1:53"; + dnsProvider = "cloudflare"; + credentialsFile = config.age.secrets.acme-cloudflare-env.path; + }; + services.nginx = { enable = true; recommendedProxySettings = true; |