tlaternet/tlaternet-server
1
0
Fork 0
Code Issues10 Pull requests Releases Activity

chore(coturn): Switch to letsencrypt certificate

Browse source 
Fixes
This commit is contained in:
Tristan Daniël Maat 2025-02-16 18:46:25 +08:00
parent 586ab969a4
commit a60cb7f60c
Signed by: tlater
GPG key ID: 49670FD774E43268
4 changed files with 47 additions and 6 deletions
configuration
nginx.nix

8
configuration/nginx.nix
View file

@ -53,7 +53,7 @@
"*.tlater.com"
];
dnsProvider = "porkbun";
group = "nginx";
group = "ssl-cert";
credentialFiles = {
PORKBUN_API_KEY_FILE = config.sops.secrets."porkbun/api-key".path;
PORKBUN_SECRET_API_KEY_FILE = config.sops.secrets."porkbun/secret-api-key".path;
@ -61,6 +61,12 @@
};
};
users.groups.ssl-cert = { };
systemd.services.nginx.serviceConfig.SupplementaryGroups = [
config.security.acme.certs."tlater.net".group
];
services.backups.acme = {
user = "acme";
paths = lib.mapAttrsToList (