diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 17:52:53 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-22 17:52:53 +0100 |
commit | 8d26c87292538f6f2b6ecc9e186926922d878cce (patch) | |
tree | 117dd60450c1575be4eb043389679b29271ae7e4 /hosts | |
parent | 69bec7cbea3a19d8cf1818d0dc027ae636e017db (diff) | |
download | nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.gz nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.bz2 nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.tar.xz nixos-8d26c87292538f6f2b6ecc9e186926922d878cce.zip |
surtr: tls: keep authorizations
Diffstat (limited to 'hosts')
-rw-r--r-- | hosts/surtr/tls/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix index 9969aa5f..5118b1ad 100644 --- a/hosts/surtr/tls/default.nix +++ b/hosts/surtr/tls/default.nix | |||
@@ -51,7 +51,7 @@ in { | |||
51 | keyType = "rsa4096"; # we don't like NIST curves | 51 | keyType = "rsa4096"; # we don't like NIST curves |
52 | extraLegoRenewFlags = [ | 52 | extraLegoRenewFlags = [ |
53 | # "--preferred-chain" "ISRG Root X1" | 53 | # "--preferred-chain" "ISRG Root X1" |
54 | "--always-deactivate-authorizations" "true" | 54 | # "--always-deactivate-authorizations" "true" |
55 | ]; | 55 | ]; |
56 | extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags; | 56 | extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags; |
57 | }; | 57 | }; |