wiki.r: add acme ssl config

This commit is contained in:
lassulus 2021-12-09 14:30:25 +01:00
parent 08cdf8a6d5
commit fba330ab36
2 changed files with 5 additions and 4 deletions

View file

@ -38,11 +38,13 @@ in
systemd.services.gollum.environment.LC_ALL = "en_US.UTF-8"; systemd.services.gollum.environment.LC_ALL = "en_US.UTF-8";
networking.firewall.allowedTCPPorts = [ 80 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];
security.acme.certs."wiki.r".server = config.krebs.ssl.acmeURL;
services.nginx = { services.nginx = {
enable = true; enable = true;
virtualHosts.wiki = { virtualHosts."wiki.r" = {
serverAliases = [ "wiki.r" "wiki.${config.networking.hostName}.r" ]; enableACME = true;
addSSL = true;
locations."/".extraConfig = '' locations."/".extraConfig = ''
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";

View file

@ -80,7 +80,6 @@ in {
"cgit.hotdog.r" "cgit.hotdog.r"
"irc.r" "irc.r"
"wiki.r" "wiki.r"
"wiki.hotdog.r"
]; ];
tinc.port = 0; tinc.port = 0;
tinc.pubkey = '' tinc.pubkey = ''