Use Let's Encrypt for SSL certificates
This commit is contained in:
+7
-2
@@ -39,6 +39,12 @@
|
|||||||
passwordAuthentication = false;
|
passwordAuthentication = false;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# Let's Encrypt certificates
|
||||||
|
security.acme = {
|
||||||
|
acceptTerms = true;
|
||||||
|
email = "manu@beffara.org";
|
||||||
|
};
|
||||||
|
|
||||||
# Nginx web server
|
# Nginx web server
|
||||||
services.nginx = {
|
services.nginx = {
|
||||||
enable = true;
|
enable = true;
|
||||||
@@ -46,8 +52,7 @@
|
|||||||
default = true;
|
default = true;
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
root = "/data/web/root";
|
root = "/data/web/root";
|
||||||
sslCertificate = "/data/web/cert/beffara.org.crt";
|
enableACME = true;
|
||||||
sslCertificateKey = "/data/web/cert/beffara.org.key";
|
|
||||||
|
|
||||||
locations."/owncloud/" = {
|
locations."/owncloud/" = {
|
||||||
alias = "/data/web/nextcloud/site/";
|
alias = "/data/web/nextcloud/site/";
|
||||||
|
|||||||
Reference in New Issue
Block a user