summaryrefslogtreecommitdiff
path: root/hosts/surtr/dns/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/surtr/dns/default.nix')
-rw-r--r--hosts/surtr/dns/default.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 5cba23d9..e0637b3b 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -48,7 +48,7 @@ in {
48 unitConfig.RequiresMountsFor = [ "/var/lib/knot" ]; 48 unitConfig.RequiresMountsFor = [ "/var/lib/knot" ];
49 serviceConfig.LoadCredential = map ({name, ...}: "${name}:${config.sops.secrets.${name}.path}") knotKeys; 49 serviceConfig.LoadCredential = map ({name, ...}: "${name}:${config.sops.secrets.${name}.path}") knotKeys;
50 }; 50 };
51 51
52 services.knot = { 52 services.knot = {
53 enable = true; 53 enable = true;
54 keyFiles = map ({name, ...}: "/run/credentials/knot.service/${name}") knotKeys; 54 keyFiles = map ({name, ...}: "/run/credentials/knot.service/${name}") knotKeys;
@@ -159,7 +159,7 @@ in {
159 ${concatMapStringsSep "\n" mkZone [ 159 ${concatMapStringsSep "\n" mkZone [
160 { domain = "yggdrasil.li"; 160 { domain = "yggdrasil.li";
161 addACLs = { "yggdrasil.li" = ["ymir_acme_acl"]; }; 161 addACLs = { "yggdrasil.li" = ["ymir_acme_acl"]; };
162 acmeDomains = ["surtr.yggdrasil.li" "yggdrasil.li"]; 162 acmeDomains = ["surtr.yggdrasil.li" "yggdrasil.li" "etesync.yggdrasil.li" "app.etesync.yggdrasil.li"];
163 } 163 }
164 { domain = "nights.email"; 164 { domain = "nights.email";
165 addACLs = { "nights.email" = ["ymir_acme_acl"]; }; 165 addACLs = { "nights.email" = ["ymir_acme_acl"]; };