acme@surtr: ...

1 files changed, 3 insertions, 1 deletions

diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix
index cc868f45..9cd6bd0c 100644
--- a/hosts/surtr/tls.nix
+++ b/hosts/surtr/tls.nix
@@ -4,6 +4,8 @@ let
   
   knotDNSCredentials = zone: pkgs.writeText "lego-credentials" ''
     EXEC_PATH=${knotDNSExec zone}/bin/update-dns.sh
+    EXEC_PROPAGATION_TIMEOUT=600
+    EXEC_POLLING_INTERVAL=10
   '';
   knotDNSExec = zone: pkgs.writeScriptBin "update-dns.sh" ''
     #!${pkgs.zsh}/bin/zsh -xe
@@ -49,7 +51,7 @@ in {
           extraDomainNames = [ "*.rheperire.org" ];
           dnsProvider = "exec";
           credentialsFile = knotDNSCredentials "rheperire.org";
-          dnsPropagationCheck = false;
+          dnsResolver = "1.1.1.1:53";
         };
       };
     };