From 5c0b6b619b2a7ee4502aa66ad8ee03ffff64cacb Mon Sep 17 00:00:00 2001 From: Joe Mou Date: Wed, 24 Apr 2024 02:09:31 -0400 Subject: ACME with DNS challenge --- hostnix/elmo/configuration.nix | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) (limited to 'hostnix/elmo/configuration.nix') diff --git a/hostnix/elmo/configuration.nix b/hostnix/elmo/configuration.nix index 31cf90b..250cfab 100644 --- a/hostnix/elmo/configuration.nix +++ b/hostnix/elmo/configuration.nix @@ -2,6 +2,7 @@ { imports = [ + ./acme.nix ./dns.nix ./dyndns.nix ./hardware-configuration.nix @@ -15,11 +16,6 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ]; - security.acme.acceptTerms = true; - security.acme.defaults.email = "hostmaster@mou.fo"; - # TODO switch to production certs - security.acme.defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory"; - security.sudo.wheelNeedsPassword = false; users.users.joe = { @@ -60,12 +56,6 @@ recommendedTlsSettings = true; }; - # TODO remove upon switching to production certs - services.oauth2_proxy.extraConfig = { - "ssl-insecure-skip-verify" = true; - "ssl-upstream-insecure-skip-verify" = true; - }; - networking.firewall.allowedTCPPorts = [ 80 443 ]; # This value determines the NixOS release from which the default -- cgit v1.3.1