kopatz/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

some acme changes

Browse Source
This commit is contained in:
Kopatz
2025-05-31 16:39:25 +02:00
parent 5f6c258898
commit f90ad6f5d9
3 changed files with 36 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
modules/services/adguard.nix
View File

@@ -18,6 +18,11 @@ in {
default = true;
description = "use https for the adguard instance";
};
acme-url = lib.mkOption {
type = lib.types.str;
default = "https://127.0.0.1:8443/acme/kop-acme/directory";
description = "acme url for the adguard instance";
};
};
config =
let
@@ -28,14 +33,12 @@ in {
networking.firewall.allowedTCPPorts = [ 53 ];
networking.firewall.allowedUDPPorts = [ 53 ];
security.acme.certs."${cfg.fqdn}".server =
"https://127.0.0.1:8443/acme/kop-acme/directory";
security.acme.certs."${cfg.fqdn}".server = cfg.acme-url;
# nginx reverse proxy
services.nginx.enable = true;
services.nginx.virtualHosts.${cfg.fqdn} = {
forceSSL = cfg.useHttps;
enableACME = cfg.useHttps;
quic = cfg.useHttps;
http3 = cfg.useHttps;
locations."/" = {
proxyPass =
"http://127.0.0.1:${toString config.services.adguardhome.port}";

5
modules/services/step-ca.nix
View File

@@ -43,13 +43,14 @@ in
owner = "step-ca";
group = "step-ca";
};
networking.firewall.allowedTCPPorts = [ 8443 ];
services.step-ca = {
enable = true;
address = "127.0.0.1";
address = "";
port = 8443;
intermediatePasswordFile = config.age.secrets.step-ca-pw.path;
settings = {
dnsNames = [ "localhost" "127.0.0.1" "*.home.arpa" ];
dnsNames = [ "localhost" "127.0.0.1" "*.home.arpa" "192.168.0.10" ];
root = pkgs.writeTextFile {
name = "root.ca";
text = root_ca;