mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-07-14 06:00:33 +03:00
acme: provide full nginx example
This commit is contained in:
parent
31c72ce266
commit
2af7382f76
1 changed files with 20 additions and 0 deletions
|
@ -74,7 +74,27 @@ options for the <literal>security.acme</literal> module.</para>
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
<programlisting>
|
<programlisting>
|
||||||
|
security.acme.certs."foo.example.com" = {
|
||||||
|
webroot = "/var/www/challenges";
|
||||||
|
email = "foo@example.com";
|
||||||
|
user = "nginx";
|
||||||
|
group = "nginx";
|
||||||
|
postRun = "systemctl restart nginx.service";
|
||||||
|
};
|
||||||
services.nginx.httpConfig = ''
|
services.nginx.httpConfig = ''
|
||||||
|
server {
|
||||||
|
server_name foo.example.com;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
location /.well-known/acme-challenge {
|
||||||
|
root /var/www/challenges;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
return 301 https://$host$request_uri;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
server {
|
server {
|
||||||
server_name foo.example.com;
|
server_name foo.example.com;
|
||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue