6f4068ff5c
- acme-dns for internal DNS-01 challenges - nsd for zone rz.ens.wtf - unbound for internal usage and resolutions - dokuwiki for network documentation - gitea for this very repository and many more - keycloak for SSO over all services - monitoring (netdata, grafana/influxdb soon) - netboot for easy provisioning of other machines Co-authored-by: Ryan Lahfa <ryan.lahfa@ens.fr>
26 lines
572 B
Nix
26 lines
572 B
Nix
{ config, ... }:
|
|
let
|
|
my = config.my;
|
|
in
|
|
{
|
|
services.acme-dns = {
|
|
enable = true;
|
|
domain = "acme.${my.subZone}";
|
|
nsname = "acme.${my.subZone}";
|
|
nsadmin = my.emailWithDot;
|
|
dns.listen = "[${my.ipv6.acme}]"; # :-).
|
|
records = [
|
|
"acme.${my.subZone}. AAAA ${my.ipv6.acme}"
|
|
"acme.${my.subZone}. NS acme.${my.subZone}."
|
|
];
|
|
};
|
|
|
|
services.nginx.enable = true;
|
|
services.nginx.virtualHosts."acme.${my.subZone}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://localhost:8090";
|
|
};
|
|
};
|
|
}
|