diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 17:52:53 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 17:52:53 +0100 |
| commit | 8d26c87292538f6f2b6ecc9e186926922d878cce (patch) | |
| tree | 117dd60450c1575be4eb043389679b29271ae7e4 /hosts/surtr/tls/default.nix | |
| parent | 69bec7cbea3a19d8cf1818d0dc027ae636e017db (diff) | |
| download | nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.gz nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.bz2 nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.xz nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.zip | |
surtr: tls: keep authorizations
Diffstat (limited to 'hosts/surtr/tls/default.nix')
| -rw-r--r-- | hosts/surtr/tls/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix index 9969aa5f..5118b1ad 100644 --- a/hosts/surtr/tls/default.nix +++ b/hosts/surtr/tls/default.nix | |||
| @@ -51,7 +51,7 @@ in { | |||
| 51 | keyType = "rsa4096"; # we don't like NIST curves | 51 | keyType = "rsa4096"; # we don't like NIST curves |
| 52 | extraLegoRenewFlags = [ | 52 | extraLegoRenewFlags = [ |
| 53 | # "--preferred-chain" "ISRG Root X1" | 53 | # "--preferred-chain" "ISRG Root X1" |
| 54 | "--always-deactivate-authorizations" "true" | 54 | # "--always-deactivate-authorizations" "true" |
| 55 | ]; | 55 | ]; |
| 56 | extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags; | 56 | extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags; |
| 57 | }; | 57 | }; |