nydragon/nix-da
1
Fork 0
Code Issues Pull requests Activity Actions 1

fix: certificate renewal
Some checks failed
/ test (push) Failing after 3m14s
Details

Browse source
This commit is contained in:
nydragon 2025-03-12 10:46:20 +01:00
parent 647aab5924
commit 39aac745e6
Signed by: nydragon
SSH key fingerprint: SHA256:WcjW5NJPQ8Dx4uQDmoIlVPLWE27Od3fxoe0IUvuoPHE
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/shan/default.nix
View file

@ -151,8 +151,9 @@
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults = { defaults = {
email = "contact@ccnlc.eu"; email = "dns@ccnlc.eu";
dnsProvider = "ovh"; dnsProvider = "ovh";
dnsResolver = "9.9.9.9"; # Necessary to avoid failing due to a local dns server
environmentFile = config.age.secrets.acme.path; environmentFile = config.age.secrets.acme.path;
}; };
@ -161,6 +162,7 @@
extraDomainNames = [ "*.ccnlc.eu" ]; extraDomainNames = [ "*.ccnlc.eu" ];
}; };
}; };
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedProxySettings = true; recommendedProxySettings = true;
@ -171,6 +173,7 @@
mkVHLocal = mkVH "http://localhost"; mkVHLocal = mkVH "http://localhost";
mkVH = domain: port: { mkVH = domain: port: {
forceSSL = true; forceSSL = true;
useACMEHost = "ccnlc.eu";
locations."/" = { locations."/" = {
proxyPass = "${domain}:${toString port}"; proxyPass = "${domain}:${toString port}";
extraConfig = '' extraConfig = ''
@ -181,7 +184,6 @@
proxy_http_version 1.1; proxy_http_version 1.1;
''; '';
}; };
useACMEHost = "ccnlc.eu";
}; };
in in
{ {
@ -198,6 +200,7 @@
"truenas.ccnlc.eu" = mkVH "https://192.168.178.21" 443; "truenas.ccnlc.eu" = mkVH "https://192.168.178.21" 443;
"calibre.ccnlc.eu" = mkVHLocal config.services.calibre-web.listen.port; "calibre.ccnlc.eu" = mkVHLocal config.services.calibre-web.listen.port;
"prometheus.ccnlc.eu" = mkVHLocal config.services.prometheus.port; "prometheus.ccnlc.eu" = mkVHLocal config.services.prometheus.port;
"adguard.ccnlc.eu" = mkVHLocal config.services.adguardhome.port;
"grafana.ccnlc.eu" = mkVHLocal config.services.grafana.settings.server.http_port; "grafana.ccnlc.eu" = mkVHLocal config.services.grafana.settings.server.http_port;
${config.services.freshrss.virtualHost} = { ${config.services.freshrss.virtualHost} = {
forceSSL = true; forceSSL = true;