diff options
| author | Franck Cuny <franck@fcuny.net> | 2026-01-01 09:29:35 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2026-01-01 09:29:35 -0800 |
| commit | d9768ec54e5b7820bb7bf3af5ddd91419349c6d3 (patch) | |
| tree | 6f54f61c82b0f7f57503cdc1b837473b7c1c38f4 /profiles | |
| parent | don't configure jovian just yet (diff) | |
| download | infra-d9768ec54e5b7820bb7bf3af5ddd91419349c6d3.tar.gz | |
combine acme and reverse proxy configuration
Diffstat (limited to '')
| -rw-r--r-- | profiles/acme.nix | 12 | ||||
| -rw-r--r-- | profiles/reverse-proxy.nix | 9 |
2 files changed, 9 insertions, 12 deletions
diff --git a/profiles/acme.nix b/profiles/acme.nix deleted file mode 100644 index df04998..0000000 --- a/profiles/acme.nix +++ /dev/null @@ -1,12 +0,0 @@ -{ config, ... }: -{ - age.secrets.acme-cloudflare-env.file = ../secrets/acme-cloudflare-env.age; - - security.acme.acceptTerms = true; - security.acme.defaults = { - email = "franck@fcuny.net"; - dnsResolver = "1.1.1.1:53"; - dnsProvider = "cloudflare"; - credentialsFile = config.age.secrets.acme-cloudflare-env.path; - }; -} diff --git a/profiles/reverse-proxy.nix b/profiles/reverse-proxy.nix index daf2ecb..45b42f5 100644 --- a/profiles/reverse-proxy.nix +++ b/profiles/reverse-proxy.nix @@ -1,6 +1,7 @@ { pkgs, lib, + config, ... }: let @@ -35,6 +36,14 @@ in 443 ]; + security.acme.acceptTerms = true; + security.acme.defaults = { + email = "franck@fcuny.net"; + dnsResolver = "1.1.1.1:53"; + dnsProvider = "cloudflare"; + credentialsFile = config.age.secrets.acme-cloudflare-env.path; + }; + services.nginx = { enable = true; recommendedProxySettings = true; |
