lets encrypt my ass
This commit is contained in:
parent
649b84782e
commit
a75dc9f0d2
1 changed files with 9 additions and 0 deletions
|
|
@ -8,6 +8,15 @@
|
||||||
(lib.mkIf config.osbmModules.services.nginx.enable {
|
(lib.mkIf config.osbmModules.services.nginx.enable {
|
||||||
services.nginx = {
|
services.nginx = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
||||||
|
# Ensure ACME challenge directory is accessible for all domains
|
||||||
|
commonHttpConfig = ''
|
||||||
|
# Allow access to ACME challenge directory
|
||||||
|
location /.well-known/acme-challenge {
|
||||||
|
root /var/lib/acme/acme-challenge;
|
||||||
|
allow all;
|
||||||
|
}
|
||||||
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [
|
networking.firewall.allowedTCPPorts = [
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue