sprechtl/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: acme over nginx

Browse source
This commit is contained in:
s-prechtl 2025-07-14 18:41:21 +02:00
parent 1d098f6530
commit 91b76ba49c
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
hosts/hitsugibune/matrix.nix
View file

@ -42,9 +42,18 @@ in {
}; };
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];
services.nginx.virtualHosts.${config.services.coturn.realm} = {
addSSL = true;
enableACME = false; # we’ll do ACME ourselves
forceSSL = false;
locations."/.well-known/acme-challenge/" = {
root = "/var/lib/acme/acme-challenges";
};
};
security.acme.certs.${config.services.coturn.realm} = { security.acme.certs.${config.services.coturn.realm} = {
listenHTTP = "0.0.0.0:80";
email = "stefan@tague.at"; email = "stefan@tague.at";
webroot = "/var/lib/acme/acme-challenges";
postRun = "systemctl restart coturn.service"; postRun = "systemctl restart coturn.service";
group = "turnserver"; group = "turnserver";
}; };