From d7b19ea3e9ad40267ee1962d35a41abe939078f6 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Fri, 1 Feb 2019 22:07:38 +0100
Subject: dhparams

---
 custom/ymir-nginx.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'custom')

diff --git a/custom/ymir-nginx.nix b/custom/ymir-nginx.nix
index 854dd4d4..975bb344 100644
--- a/custom/ymir-nginx.nix
+++ b/custom/ymir-nginx.nix
@@ -86,10 +86,10 @@ in {
       ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
       ssl_prefer_server_ciphers on;
       ssl_session_cache shared:SSL:10m;
-      ssl_dhparam /etc/ssl/dhparam.pem;
+      ssl_dhparam ${config.security.dhparams.params.nginx.path};
       
-      ssl_certificate /var/lib/acme/yggdrasil.li/fullchain.pem;
-      ssl_certificate_key /var/lib/acme/yggdrasil.li/key.pem;
+      ssl_certificate ${config.security.acme.directory}/yggdrasil.li/fullchain.pem;
+      ssl_certificate_key ${config.security.acme.directory}/yggdrasil.li/key.pem;
 
       server {
         listen *:80;
-- 
cgit v1.2.3