diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 12:31:28 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 12:31:28 +0100 |
| commit | 605020362ef98198e5153a3fea257b801e1ad834 (patch) | |
| tree | e0380f791eb71006605c61cdfd8cacdac541067d /hosts/surtr | |
| parent | 2f2c637bcdcc892f4543e2b2fe33aa0931dc215b (diff) | |
| download | nixos-605020362ef98198e5153a3fea257b801e1ad834.tar nixos-605020362ef98198e5153a3fea257b801e1ad834.tar.gz nixos-605020362ef98198e5153a3fea257b801e1ad834.tar.bz2 nixos-605020362ef98198e5153a3fea257b801e1ad834.tar.xz nixos-605020362ef98198e5153a3fea257b801e1ad834.zip | |
...
Diffstat (limited to 'hosts/surtr')
| -rw-r--r-- | hosts/surtr/tls/default.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix index f8225802..01c9050e 100644 --- a/hosts/surtr/tls/default.nix +++ b/hosts/surtr/tls/default.nix | |||
| @@ -124,6 +124,9 @@ in { | |||
| 124 | RFC2136_TSIG_ALGORITHM=hmac-sha256. | 124 | RFC2136_TSIG_ALGORITHM=hmac-sha256. |
| 125 | RFC2136_TSIG_KEY=${domain}_acme_key | 125 | RFC2136_TSIG_KEY=${domain}_acme_key |
| 126 | RFC2136_TSIG_SECRET_FILE=${tsigSecret.path} | 126 | RFC2136_TSIG_SECRET_FILE=${tsigSecret.path} |
| 127 | RFC2136_TTL=0 | ||
| 128 | RFC2136_PROPAGATION_TIMEOUT=60 | ||
| 129 | RFC2136_POLLING_INTERVAL=2 | ||
| 127 | ''; | 130 | ''; |
| 128 | }; | 131 | }; |
| 129 | in (if isTsig then mkRFC2136 else mkKnotc) // cfg.domains.${domain}.certCfg; | 132 | in (if isTsig then mkRFC2136 else mkKnotc) // cfg.domains.${domain}.certCfg; |