From d5f787a40b8406c6f20350b2945a741901cefb44 Mon Sep 17 00:00:00 2001 From: Joe Mou Date: Thu, 21 Dec 2023 20:09:41 -0800 Subject: Revert "Switch to production ACME certs" This reverts commit 18148c3dec9154f43c5be6f2ed9e427e990c6a06. --- hostnix/weebnix/configuration.nix | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'hostnix/weebnix/configuration.nix') diff --git a/hostnix/weebnix/configuration.nix b/hostnix/weebnix/configuration.nix index a1c1420..14427f0 100644 --- a/hostnix/weebnix/configuration.nix +++ b/hostnix/weebnix/configuration.nix @@ -18,6 +18,8 @@ security.acme.acceptTerms = true; security.acme.defaults.email = "hostmaster@mou.fo"; + # TODO switch to production certs + security.acme.defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory"; users.users.joe = { isNormalUser = true; @@ -66,6 +68,12 @@ ''; }; + # TODO remove upon switching to production certs + services.oauth2_proxy.extraConfig = { + "ssl-insecure-skip-verify" = true; + "ssl-upstream-insecure-skip-verify" = true; + }; + networking.firewall.allowedTCPPorts = [ 80 443 ]; # This value determines the NixOS release from which the default -- cgit v1.3.1