4 ms·
On a side note: in NixOS ACME has been integrated into the nginx configuration. To set up a server with TLS you just do security.acme.certs = { "example.
by rnhmjoj 10y ago
On a side note: in NixOS ACME has been integrated into the nginx configuration. To set up a server with TLS you just do
security.acme.certs = {
"example.com".email = "youremail@address.com";
};
services.nginx = {
enable = true;
virtualHosts."example.com" = {
enableSSL = true;
enableACME = true;
};
};
This fetches the certificates and set up a service and a timer to periodically renew them.
- schoen 10y agoWow, is their nginx support portable to other OSes? Do you know who has implemented it?
- rnhmjoj 10y agoNixOS modules are built around Nix and systemd so theoretically you could write a port for a different GNU/Linux distribution if you have those available. I'm not aware of any though. There is however a variant for Darwin based on launchd: https://github.com/LnL7/nix-darwin https://github.com/LnL7/nix-darwin You can find the implementation of the nginx service here: https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/web-servers/nginx/default.nix https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/s...
- schoen 10y agoThanks, I'd like the people working on nginx integration for certbot to see this!