From 1facb5ee013282419b8d5629f46acf54b9bb02cc Mon Sep 17 00:00:00 2001 From: Joe Mou Date: Sun, 1 Oct 2023 14:56:12 -0400 Subject: Switch to production ACME certs --- hostnix/weebnix/configuration.nix | 8 -------- 1 file changed, 8 deletions(-) (limited to 'hostnix/weebnix') diff --git a/hostnix/weebnix/configuration.nix b/hostnix/weebnix/configuration.nix index 0e6591d..1669b8a 100644 --- a/hostnix/weebnix/configuration.nix +++ b/hostnix/weebnix/configuration.nix @@ -16,8 +16,6 @@ security.acme.acceptTerms = true; security.acme.defaults.email = "hostmaster@mou.fo"; - # TODO switch to production certs - security.acme.defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory"; users.users.joe = { isNormalUser = true; @@ -82,12 +80,6 @@ ''; }; - # TODO remove upon switching to production certs - services.oauth2_proxy.extraConfig = { - "ssl-insecure-skip-verify" = true; - "ssl-upstream-insecure-skip-verify" = true; - }; - networking.firewall.allowedTCPPorts = [ 80 443 ]; # This value determines the NixOS release from which the default -- cgit v1.3.1