diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2021-12-23 13:54:00 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2021-12-23 13:54:00 +0100 |
commit | b9adb4109270df69ce2c45358b8f56d1bd1b7f60 (patch) | |
tree | b4f1af829186c21ba0a0fa7b60a3839b7ce5e9a5 | |
parent | 2eadf585107e743a2ee3878b045e05f924c7046d (diff) | |
download | nixos-b9adb4109270df69ce2c45358b8f56d1bd1b7f60.tar nixos-b9adb4109270df69ce2c45358b8f56d1bd1b7f60.tar.gz nixos-b9adb4109270df69ce2c45358b8f56d1bd1b7f60.tar.bz2 nixos-b9adb4109270df69ce2c45358b8f56d1bd1b7f60.tar.xz nixos-b9adb4109270df69ce2c45358b8f56d1bd1b7f60.zip |
surtr: rsa tls keys
-rw-r--r-- | hosts/surtr/tls.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix index 3aa53fb0..f05420cc 100644 --- a/hosts/surtr/tls.nix +++ b/hosts/surtr/tls.nix | |||
@@ -65,6 +65,7 @@ in { | |||
65 | dnsProvider = "exec"; | 65 | dnsProvider = "exec"; |
66 | credentialsFile = knotDNSCredentials domain; | 66 | credentialsFile = knotDNSCredentials domain; |
67 | dnsResolver = "1.1.1.1:53"; | 67 | dnsResolver = "1.1.1.1:53"; |
68 | keyType = "rsa4096"; # we don't like NIST curves | ||
68 | }; | 69 | }; |
69 | in genAttrs domains domainAttrset; | 70 | in genAttrs domains domainAttrset; |
70 | }; | 71 | }; |