Working nginx with tls

This commit is contained in:
Gene Liverman 2024-04-05 09:30:41 -04:00
parent e9793beb7b
commit 8e1b2bb05e

View file

@ -38,10 +38,11 @@ in {
default = true; default = true;
listen = [ listen = [
{ port = http_port; addr = "0.0.0.0"; } { port = http_port; addr = "0.0.0.0"; }
{ port = https_port; addr = "0.0.0.0"; } { port = https_port; addr = "0.0.0.0"; ssl = true; }
]; ];
enableACME = true; enableACME = true;
acmeRoot = null; acmeRoot = null;
addSSL = true;
forceSSL = false; forceSSL = false;
}; };
}; };
@ -54,9 +55,9 @@ in {
credentialFiles = { "GANDIV5_API_KEY_FILE" = gandi_api; }; credentialFiles = { "GANDIV5_API_KEY_FILE" = gandi_api; };
#credentialFiles = { "GANDIV5_PERSONAL_ACCESS_TOKEN_FILE" = gandi_dns_pat; }; #credentialFiles = { "GANDIV5_PERSONAL_ACCESS_TOKEN_FILE" = gandi_dns_pat; };
dnsProvider = "gandiv5"; dnsProvider = "gandiv5";
# uncomment below for testing
#server = "https://acme-staging-v02.api.letsencrypt.org/directory";
}; };
# uncomment below for testing
defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
}; };
networking = { networking = {