c8h4/nixos-config
1
0
Fork 0
Code Issues Actions Activity

services: nginx: simplify ACME setup a bit

Browse source 
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
This commit is contained in:
Christoph Heiss 2024-01-21 00:31:25 +01:00
parent 8eec828a1d
commit 9d99ac705b
Signed by: c8h4
GPG key ID: 73D5E7FDEE3DE49A
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
secrets/morph/acme.nix
View file

Binary file not shown.

6
services/nginx.nix
View file

@ -1,4 +1,4 @@
{ pkgs, ... }:
{ config, pkgs, secrets, ... }:
{
services.nginx = {
@ -13,7 +13,7 @@
recommendedZstdSettings = true;
};
users.users.nginx.extraGroups = [ "acme" ];
users.users.nginx.extraGroups = [ config.security.acme.defaults.group ];
networking.firewall.allowedTCPPorts = [ 80 443 ];
@ -22,7 +22,7 @@
dnsProvider = "hetzner";
dnsResolver = "hydrogen.ns.hetzner.com:53";
reloadServices = [ "nginx" ];
environmentFile = "/var/secrets/hetzner-acme";
environmentFile = secrets.hetzner-acme.destination;
};
systemd.services.nginx = {