msyds/sydnix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deertopia): Persist SSL certs

Browse Source
This commit is contained in:
Madeleine Sydney
2025-02-25 03:44:51 -07:00
parent 4746fe5f37
commit a5bab1d73d
2 changed files with 21 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/nixos/deertopia/authelia.nix
View File

@@ -132,7 +132,9 @@ in {
}; };
}; };
sydnix.deertopia.nginx.vhosts."auth".vhost = { sydnix.deertopia.nginx.vhosts."auth" = {
directory = null;
vhost = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
extraConfig = '' extraConfig = ''
@@ -145,6 +147,7 @@ in {
locations."/api/verify".proxyPass = "$upstream"; locations."/api/verify".proxyPass = "$upstream";
locations."/api/authz".proxyPass = "$upstream"; locations."/api/authz".proxyPass = "$upstream";
}; };
};
# TODO: Remove this. It's only used for a quick demo for myself. The # TODO: Remove this. It's only used for a quick demo for myself. The
# domain choice is arbitrary. It's just one I happen to have set up. # domain choice is arbitrary. It's just one I happen to have set up.

5
modules/nixos/deertopia/nginx.nix
View File

@@ -85,6 +85,11 @@ in
defaults.email = "lomiskiam@gmail.com"; defaults.email = "lomiskiam@gmail.com";
}; };
sydnix.impermanence.directories = [
# Don't regenerate certs on reboot.
"/var/lib/acme"
];
services.nginx.virtualHosts = services.nginx.virtualHosts =
builtins.listToAttrs builtins.listToAttrs
(builtins.map (builtins.map