diff options
| -rw-r--r-- | machines/lapin/default.nix | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/machines/lapin/default.nix b/machines/lapin/default.nix index 00d1608..69960c3 100644 --- a/machines/lapin/default.nix +++ b/machines/lapin/default.nix @@ -14,6 +14,17 @@ ../../services/akkoma ]; + security.acme.certs."pds.rnrd.eu" = { + group = "nginx"; + domain = "*.pds.rnrd.eu"; + extraDomainNames = [ "pds.rnrd.eu" ]; + dnsProvider = "cloudflare"; + credentialFiles = { + # TODO: use age + CLOUDFLARE_DNS_API_TOKEN_FILE = "/home/mel/cloudflare-dns-token.pw"; + }; + }; + services.nginx.virtualHosts = { "soc.rnrd.eu" = { forceSSL = true; @@ -35,11 +46,9 @@ }; "pds.rnrd.eu" = { - # NOTE: technically this isn't needed if - # we aren't using the PDS as a handle provider? - # serverAliases = [ "*.pds.rnrd.eu" ]; + serverAliases = [ "*.pds.rnrd.eu" ]; forceSSL = true; - enableACME = true; + useACMEHost = "pds.rnrd.eu"; locations."/" = { proxyWebsockets = true; |