thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Revert "use enableACME for all virtualHosts"

Browse Source 
This reverts commit 46366702bc.
This commit is contained in:
Alexander Tomokhov
2023-12-19 23:46:42 +04:00
parent 46366702bc
commit c18f332f5f
10 changed files with 30 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
webserver/nginx.nix
View File

@@ -21,8 +21,9 @@ in
'';
virtualHosts = {
"${domain}" = {
sslCertificate = "/var/lib/acme/${domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/${domain}/key.pem";
forceSSL = true;
enableACME = true;
extraConfig = ''
add_header Strict-Transport-Security $hsts_header;
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
@@ -40,8 +41,9 @@ in
};
};
"api.${domain}" = {
sslCertificate = "/var/lib/acme/${domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/${domain}/key.pem";
forceSSL = true;
enableACME = true;
extraConfig = ''
add_header Strict-Transport-Security $hsts_header;
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;