updates

Former-commit-id: d2d113fab5
2026-04-02 11:12:09 +02:00 · 2025-03-19 15:46:23 +01:00
parent 9151dc75d8
commit e5f2161604
5 changed files with 83 additions and 28 deletions
--- a/server-modules/nginx.nix
+++ b/server-modules/nginx.nix
@@ -6,5 +6,16 @@
    defaults.email = config.var.git.email;
  };

+  security.acme.certs."hadi.diy" = {
+    domain = "hadi.diy";
+    extraDomainNames = [ "*.hadi.diy" ];
+    group = "nginx";
+
+    dnsProvider = "cloudflare";
+    dnsPropagationCheck = true;
+    credentialsFile = config.sops.secrets.cloudflare-dns-token.path;
+  };
+
  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedUDPPorts = [ 80 443 ];
 }