summaryrefslogtreecommitdiff
path: root/hosts/surtr/dns/default.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-11-10 09:15:50 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-11-10 09:15:50 +0100
commit7e97353075b4acee96488d022e456f80f4f903ed (patch)
tree570260991c2ecf972b885b45ea4acd76dde0dbd9 /hosts/surtr/dns/default.nix
parent9d616c8d297db37cc929b711e63f249c3cbe44a5 (diff)
downloadnixos-7e97353075b4acee96488d022e456f80f4f903ed.tar
nixos-7e97353075b4acee96488d022e456f80f4f903ed.tar.gz
nixos-7e97353075b4acee96488d022e456f80f4f903ed.tar.bz2
nixos-7e97353075b4acee96488d022e456f80f4f903ed.tar.xz
nixos-7e97353075b4acee96488d022e456f80f4f903ed.zip
surtr: etebase
Diffstat (limited to 'hosts/surtr/dns/default.nix')
-rw-r--r--hosts/surtr/dns/default.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 5cba23d9..e0637b3b 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -48,7 +48,7 @@ in {
48 unitConfig.RequiresMountsFor = [ "/var/lib/knot" ]; 48 unitConfig.RequiresMountsFor = [ "/var/lib/knot" ];
49 serviceConfig.LoadCredential = map ({name, ...}: "${name}:${config.sops.secrets.${name}.path}") knotKeys; 49 serviceConfig.LoadCredential = map ({name, ...}: "${name}:${config.sops.secrets.${name}.path}") knotKeys;
50 }; 50 };
51 51
52 services.knot = { 52 services.knot = {
53 enable = true; 53 enable = true;
54 keyFiles = map ({name, ...}: "/run/credentials/knot.service/${name}") knotKeys; 54 keyFiles = map ({name, ...}: "/run/credentials/knot.service/${name}") knotKeys;
@@ -159,7 +159,7 @@ in {
159 ${concatMapStringsSep "\n" mkZone [ 159 ${concatMapStringsSep "\n" mkZone [
160 { domain = "yggdrasil.li"; 160 { domain = "yggdrasil.li";
161 addACLs = { "yggdrasil.li" = ["ymir_acme_acl"]; }; 161 addACLs = { "yggdrasil.li" = ["ymir_acme_acl"]; };
162 acmeDomains = ["surtr.yggdrasil.li" "yggdrasil.li"]; 162 acmeDomains = ["surtr.yggdrasil.li" "yggdrasil.li" "etesync.yggdrasil.li" "app.etesync.yggdrasil.li"];
163 } 163 }
164 { domain = "nights.email"; 164 { domain = "nights.email";
165 addACLs = { "nights.email" = ["ymir_acme_acl"]; }; 165 addACLs = { "nights.email" = ["ymir_acme_acl"]; };