thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Revert "Revert "Revert "add wildcard ACME certificate"""

Browse Source 
This reverts commit 4faf8e7dda.
This commit is contained in:
Alexander Tomokhov
2023-12-20 17:36:06 +04:00
parent 3a66da49e1
commit dcaf96c773
9 changed files with 21 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
sp-modules/ocserv/module.nix
View File

@@ -28,8 +28,8 @@ in
tcp-port = 8443
udp-port = 8443
server-cert = /var/lib/acme/wildcard-${domain}/fullchain.pem
server-key = /var/lib/acme/wildcard-${domain}/key.pem
server-cert = /var/lib/acme/${domain}/fullchain.pem
server-key = /var/lib/acme/${domain}/key.pem
compression = true
@@ -56,8 +56,8 @@ in
'';
};
services.nginx.virtualHosts."vpn.${domain}" = {
sslCertificate = "/var/lib/acme/wildcard-${domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/wildcard-${domain}/key.pem";
sslCertificate = "/var/lib/acme/${domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/${domain}/key.pem";
forceSSL = true;
extraConfig = ''
add_header Strict-Transport-Security $hsts_header;