2283ee602a
This enables the tracking of core-services-01 over the infrastructure repository. Co-authored-by: Gabriel DORIATH DOHLER <gabriel.doriath.dohler@ens.psl.eu> Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/1 Co-authored-by: raito <raito@noreply.git.rz.ens.wtf> Co-committed-by: raito <raito@noreply.git.rz.ens.wtf>
26 lines
572 B
Nix
26 lines
572 B
Nix
{ config, ... }:
|
|
let
|
|
my = config.my;
|
|
in
|
|
{
|
|
services.acme-dns = {
|
|
enable = true;
|
|
domain = "acme.${my.subZone}";
|
|
nsname = "acme.${my.subZone}";
|
|
nsadmin = my.emailWithDot;
|
|
dns.listen = "[${my.ipv6.acme}]"; # :-).
|
|
records = [
|
|
"acme.${my.subZone}. AAAA ${my.ipv6.acme}"
|
|
"acme.${my.subZone}. NS acme.${my.subZone}."
|
|
];
|
|
};
|
|
|
|
services.nginx.enable = true;
|
|
services.nginx.virtualHosts."acme.${my.subZone}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://localhost:8090";
|
|
};
|
|
};
|
|
}
|