From 50254c4b86cfbb45cd8a697463026481ccb2e4a1 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <pngwjpgh@users.noreply.github.com>
Date: Thu, 24 Nov 2016 18:01:21 +0100
Subject: infinoted: certificate-auth

---
 ymir.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/ymir.nix b/ymir.nix
index e82d89ff..abd9eacd 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -702,5 +702,13 @@ in rec {
     keyFile = "/var/lib/acme/yggdrasil.li/key.pem";
     certificateFile = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     passwordFile = "/var/lib/infinoted/password";
+    plugins = [ "note-text" "note-chat" "logging" "autosave" "certificate-auth" ];
+    extraConfig = ''
+      [certificate-auth]
+      ca-list=/var/lib/infinoted/ca.cert.pem
+      ca-key=/var/lib/infinoted/ca.key.pem
+      accept-unauthenticated-clients=false
+      super-user=/var/lib/infinoted/su.pem
+    '';
   };
 }
-- 
cgit v1.2.3