Revert "Revert "add wildcard ACME certificate""

This reverts commit 0c4d57c33d.
This commit is contained in:
Alexander Tomokhov
2023-12-20 16:59:57 +04:00
parent c18f332f5f
commit 4faf8e7dda
9 changed files with 26 additions and 21 deletions

View File

@@ -69,8 +69,8 @@
};
};
services.nginx.virtualHosts.${hostName} = {
sslCertificate = "/var/lib/acme/${sp.domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/${sp.domain}/key.pem";
sslCertificate = "/var/lib/acme/wildcard-${sp.domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/wildcard-${sp.domain}/key.pem";
forceSSL = true;
extraConfig = ''
add_header Strict-Transport-Security $hsts_header;