nixos

commit 7fd302c8bcf0d7a4c54249c9aedd7f14d188c966
parent 2dcf620b191c3e3bffbe0250a8e21020f0e18b8a
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat,  6 Apr 2024 21:24:57 +0200

Fix ssl certs

Diffstat:
M
nixos/worker-2/soju.nix
 | 
13
+++++++++++++

1 file changed, 13 insertions(+), 0 deletions(-)
diff --git a/nixos/worker-2/soju.nix b/nixos/worker-2/soju.nix
@@ -20,8 +20,21 @@
 
   security.acme.certs."soju.midnightthoughts.space" = {
     reloadServices = ["soju"];
+    webroot = "/var/lib/acme/.challenges";
     listenHTTP = ":1360";
   };
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "soju.midnightthoughts.space" = {
+        # Catchall vhost, will redirect users to HTTPS for all vhosts
+        serverAliases = ["*.midnightthoughts.space"];
+        locations."/.well-known/acme-challenge" = {
+          root = "/var/lib/acme/.challenges";
+        };
+      };
+    };
+  };
   networking.firewall.allowedTCPPorts = [
     6697
     1360