useACMEHost for all services

This commit is contained in:
Alexander Tomokhov
2023-12-22 19:57:48 +04:00
parent 5aba990f95
commit e6496b95a4
10 changed files with 15 additions and 21 deletions

View File

@@ -71,8 +71,7 @@
};
};
services.nginx.virtualHosts.${hostName} = {
sslCertificate = "/var/lib/acme/${sp.domain}/fullchain.pem";
sslCertificateKey = "/var/lib/acme/${sp.domain}/key.pem";
useACMEHost = config.selfprivacy.domain;
forceSSL = true;
extraConfig = ''
add_header Strict-Transport-Security $hsts_header;