kopatz/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

some acme changes

Browse Source
This commit is contained in:
Kopatz
2025-05-31 16:39:25 +02:00
parent 5f6c258898
commit f90ad6f5d9
3 changed files with 36 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/services/step-ca.nix
View File

@@ -43,13 +43,14 @@ in
owner = "step-ca";
group = "step-ca";
};
networking.firewall.allowedTCPPorts = [ 8443 ];
services.step-ca = {
enable = true;
address = "127.0.0.1";
address = "";
port = 8443;
intermediatePasswordFile = config.age.secrets.step-ca-pw.path;
settings = {
dnsNames = [ "localhost" "127.0.0.1" "*.home.arpa" ];
dnsNames = [ "localhost" "127.0.0.1" "*.home.arpa" "192.168.0.10" ];
root = pkgs.writeTextFile {
name = "root.ca";
text = root_ca;