From 605020362ef98198e5153a3fea257b801e1ad834 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 22 Feb 2022 12:31:28 +0100
Subject: ...
---
hosts/surtr/tls/default.nix | 3 +++
1 file changed, 3 insertions(+)
(limited to 'hosts/surtr/tls')
diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix
index f8225802..01c9050e 100644
--- a/hosts/surtr/tls/default.nix
+++ b/hosts/surtr/tls/default.nix
@@ -124,6 +124,9 @@ in {
RFC2136_TSIG_ALGORITHM=hmac-sha256.
RFC2136_TSIG_KEY=${domain}_acme_key
RFC2136_TSIG_SECRET_FILE=${tsigSecret.path}
+ RFC2136_TTL=0
+ RFC2136_PROPAGATION_TIMEOUT=60
+ RFC2136_POLLING_INTERVAL=2
'';
};
in (if isTsig then mkRFC2136 else mkKnotc) // cfg.domains.${domain}.certCfg;
--
cgit v1.2.3