motiejus/config
1
Fork 0
Code Packages Releases Activity

acme for irc.jakstys.lt

Browse Source
This commit is contained in:
Motiejus Jakštys 2023-08-22 14:26:47 +03:00
parent 6f6c863a91
commit c4bd57c47d
2 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
data.nix
View File

@ -14,6 +14,7 @@ rec {
node = 9002; node = 9002;
}; };
kodi = 8080; kodi = 8080;
soju = 6697;
}; };
people_pubkeys = { people_pubkeys = {

16
hosts/vno1-oh2/configuration.nix
View File

@ -73,6 +73,7 @@
443 443
myData.ports.grafana myData.ports.grafana
myData.ports.prometheus myData.ports.prometheus
myData.ports.soju
]; ];
node_exporter.enable = true; node_exporter.enable = true;
@ -83,6 +84,10 @@
accountKey = config.age.secrets.letsencrypt-account-key.path; accountKey = config.age.secrets.letsencrypt-account-key.path;
staging = false; staging = false;
}; };
zones."irc.jakstys.lt" = {
accountKey = config.age.secrets.letsencrypt-account-key.path;
staging = true;
};
}; };
deployerbot = { deployerbot = {
@ -222,15 +227,12 @@
systemd.services = { systemd.services = {
caddy = let caddy = let
grafanaZone = config.mj.services.nsd-acme.zones."grafana.jakstys.lt"; acme = config.mj.services.nsd-acme.zones."grafana.jakstys.lt";
in { in {
unitConfig.ConditionPathExists = [ unitConfig.ConditionPathExists = [acme.certFile acme.keyFile];
grafanaZone.certFile
grafanaZone.keyFile
];
serviceConfig.LoadCredential = [ serviceConfig.LoadCredential = [
"grafana.jakstys.lt-cert.pem:${grafanaZone.certFile}" "grafana.jakstys.lt-cert.pem:${acme.certFile}"
"grafana.jakstys.lt-key.pem:${grafanaZone.keyFile}" "grafana.jakstys.lt-key.pem:${acme.keyFile}"
]; ];
after = ["nsd-acme-grafana.jakstys.lt.service"]; after = ["nsd-acme-grafana.jakstys.lt.service"];
wants = ["nsd-acme-grafana.jakstys.lt.service"]; wants = ["nsd-acme-grafana.jakstys.lt.service"];