dachxy/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: maintain

Browse source
This commit is contained in:
danny 2026-01-20 13:41:53 +08:00
parent 2378a66114
commit 25482857d4
58 changed files with 1095 additions and 747 deletions
Download patch file Download diff file Expand all files Collapse all files

9
system/dev/dn-server/network/step-ca.nix
View file

@ -1,4 +1,7 @@
{ pkgs, config, ... }:
let
inherit (config.networking) domain;
in
{
environment.systemPackages = with pkgs; [ step-cli ];
@ -57,7 +60,7 @@ Bq-3sY8n13Dv0E6yx2hVIAlzLj3aE29LC4A2j81vW5MtpaM27lMpg.cwlqZ-8l1iZNeeS9.idRpRJ9zB
};
dnsNames = [
"10.0.0.1"
"ca.net.dn"
"ca.${domain}"
];
federatedRoots = null;
insecureAddress = "";
@ -81,8 +84,8 @@ Bq-3sY8n13Dv0E6yx2hVIAlzLj3aE29LC4A2j81vW5MtpaM27lMpg.cwlqZ-8l1iZNeeS9.idRpRJ9zB
intermediatePasswordFile = config.sops.secrets."step_ca/password".path;
};
services.nginx.virtualHosts."ca.net.dn" = {
enableACME = true;
services.nginx.virtualHosts."ca.${domain}" = {
useACMEHost = domain;
forceSSL = true;
locations."/" = {
proxyPass = "https://10.0.0.1:8443/";