summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-02-22 17:52:53 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-02-22 17:52:53 +0100
commit8d26c87292538f6f2b6ecc9e186926922d878cce (patch)
tree117dd60450c1575be4eb043389679b29271ae7e4 /hosts
parent69bec7cbea3a19d8cf1818d0dc027ae636e017db (diff)
downloadnixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar
nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.gz
nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.bz2
nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.xz
nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.zip
surtr: tls: keep authorizations
Diffstat (limited to 'hosts')
-rw-r--r--hosts/surtr/tls/default.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix
index 9969aa5f..5118b1ad 100644
--- a/hosts/surtr/tls/default.nix
+++ b/hosts/surtr/tls/default.nix
@@ -51,7 +51,7 @@ in {
51 keyType = "rsa4096"; # we don't like NIST curves 51 keyType = "rsa4096"; # we don't like NIST curves
52 extraLegoRenewFlags = [ 52 extraLegoRenewFlags = [
53 # "--preferred-chain" "ISRG Root X1" 53 # "--preferred-chain" "ISRG Root X1"
54 "--always-deactivate-authorizations" "true" 54 # "--always-deactivate-authorizations" "true"
55 ]; 55 ];
56 extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags; 56 extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags;
57 }; 57 };