diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 11:19:10 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 11:19:10 +0100 |
| commit | dfa02cb2e26afd4b51b864d8ff6ae1bac3fbd8b5 (patch) | |
| tree | 5e95a133376fe1e03d0f99b4249e33a7cbf9013e | |
| parent | 676693c5f61ed38450ad15b2e8c7ffb2c3a500b0 (diff) | |
| download | nixos-dfa02cb2e26afd4b51b864d8ff6ae1bac3fbd8b5.tar nixos-dfa02cb2e26afd4b51b864d8ff6ae1bac3fbd8b5.tar.gz nixos-dfa02cb2e26afd4b51b864d8ff6ae1bac3fbd8b5.tar.bz2 nixos-dfa02cb2e26afd4b51b864d8ff6ae1bac3fbd8b5.tar.xz nixos-dfa02cb2e26afd4b51b864d8ff6ae1bac3fbd8b5.zip | |
...
| -rw-r--r-- | hosts/surtr/tls/default.nix | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix index 7e6b370c..9f8d92d6 100644 --- a/hosts/surtr/tls/default.nix +++ b/hosts/surtr/tls/default.nix | |||
| @@ -94,10 +94,11 @@ in { | |||
| 94 | defaults = { | 94 | defaults = { |
| 95 | email = "phikeebaogobaegh@141.li"; | 95 | email = "phikeebaogobaegh@141.li"; |
| 96 | keyType = "rsa4096"; # we don't like NIST curves | 96 | keyType = "rsa4096"; # we don't like NIST curves |
| 97 | extraLegoFlags = [ | 97 | extraLegoRenewFlags = [ |
| 98 | "--always-deactivate-authorizations" "true" | ||
| 99 | # "--preferred-chain" "ISRG Root X1" | 98 | # "--preferred-chain" "ISRG Root X1" |
| 99 | "--always-deactivate-authorizations" "true" | ||
| 100 | ]; | 100 | ]; |
| 101 | extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags; | ||
| 101 | }; | 102 | }; |
| 102 | certs = | 103 | certs = |
| 103 | let | 104 | let |