feat: http acme challenge

This commit is contained in:
s-prechtl 2025-04-19 23:59:49 +02:00
parent 846eef9683
commit ffe0481e6f

View file

@ -58,13 +58,14 @@
allowedUDPPortRanges = range;
allowedUDPPorts = [3478 5349];
allowedTCPPortRanges = [];
allowedTCPPorts = [3478 5349];
allowedTCPPorts = [ 80 3478 5349];
};
};
# get a certificate
security.acme.defaults.email = "stefan@tague.at";
security.acme.acceptTerms = true;
security.acme.certs.${config.services.coturn.realm} = {
listenHTTP = true;
postRun = "systemctl restart coturn.service";
group = "turnserver";
};