From 9864fbb0ccbc22a38ac8956d50c1c8a77613ea39 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sun, 30 May 2021 16:56:12 +0200
Subject: acme@surtr: ...

---
 hosts/surtr/tls.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'hosts/surtr/tls.nix')

diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix
index cc868f45..9cd6bd0c 100644
--- a/hosts/surtr/tls.nix
+++ b/hosts/surtr/tls.nix
@@ -4,6 +4,8 @@ let
   
   knotDNSCredentials = zone: pkgs.writeText "lego-credentials" ''
     EXEC_PATH=${knotDNSExec zone}/bin/update-dns.sh
+    EXEC_PROPAGATION_TIMEOUT=600
+    EXEC_POLLING_INTERVAL=10
   '';
   knotDNSExec = zone: pkgs.writeScriptBin "update-dns.sh" ''
     #!${pkgs.zsh}/bin/zsh -xe
@@ -49,7 +51,7 @@ in {
           extraDomainNames = [ "*.rheperire.org" ];
           dnsProvider = "exec";
           credentialsFile = knotDNSCredentials "rheperire.org";
-          dnsPropagationCheck = false;
+          dnsResolver = "1.1.1.1:53";
         };
       };
     };
-- 
cgit v1.2.3