acme for irc.jakstys.lt
This commit is contained in:
parent
6f6c863a91
commit
c4bd57c47d
1
data.nix
1
data.nix
@ -14,6 +14,7 @@ rec {
|
||||
node = 9002;
|
||||
};
|
||||
kodi = 8080;
|
||||
soju = 6697;
|
||||
};
|
||||
|
||||
people_pubkeys = {
|
||||
|
@ -73,6 +73,7 @@
|
||||
443
|
||||
myData.ports.grafana
|
||||
myData.ports.prometheus
|
||||
myData.ports.soju
|
||||
];
|
||||
|
||||
node_exporter.enable = true;
|
||||
@ -83,6 +84,10 @@
|
||||
accountKey = config.age.secrets.letsencrypt-account-key.path;
|
||||
staging = false;
|
||||
};
|
||||
zones."irc.jakstys.lt" = {
|
||||
accountKey = config.age.secrets.letsencrypt-account-key.path;
|
||||
staging = true;
|
||||
};
|
||||
};
|
||||
|
||||
deployerbot = {
|
||||
@ -222,15 +227,12 @@
|
||||
|
||||
systemd.services = {
|
||||
caddy = let
|
||||
grafanaZone = config.mj.services.nsd-acme.zones."grafana.jakstys.lt";
|
||||
acme = config.mj.services.nsd-acme.zones."grafana.jakstys.lt";
|
||||
in {
|
||||
unitConfig.ConditionPathExists = [
|
||||
grafanaZone.certFile
|
||||
grafanaZone.keyFile
|
||||
];
|
||||
unitConfig.ConditionPathExists = [acme.certFile acme.keyFile];
|
||||
serviceConfig.LoadCredential = [
|
||||
"grafana.jakstys.lt-cert.pem:${grafanaZone.certFile}"
|
||||
"grafana.jakstys.lt-key.pem:${grafanaZone.keyFile}"
|
||||
"grafana.jakstys.lt-cert.pem:${acme.certFile}"
|
||||
"grafana.jakstys.lt-key.pem:${acme.keyFile}"
|
||||
];
|
||||
after = ["nsd-acme-grafana.jakstys.lt.service"];
|
||||
wants = ["nsd-acme-grafana.jakstys.lt.service"];
|
||||
|
Loading…
Reference in New Issue
Block a user