thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use enableACME for all virtualHosts

Browse Source
This commit is contained in:
Alexander Tomokhov
2023-12-19 16:38:46 +04:00
parent 0c4d57c33d
commit 46366702bc
10 changed files with 12 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
sp-modules/pleroma/module.nix
View File

@@ -100,10 +100,9 @@ in
# seems to be an upstream nixpkgs/nixos bug (missing hexdump)
systemd.services.pleroma.path = [ pkgs.util-linux ];
services.nginx.virtualHosts."social.${sp.domain}" = {
sslCertificate = "/var/lib/acme/${sp.domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/${sp.domain}/key.pem";
root = "/var/www/social.${sp.domain}";
forceSSL = true;
enableACME = true;
extraConfig = ''
add_header Strict-Transport-Security $hsts_header;
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;