all repos — nixfiles @ 58dffa0d966e07eefac139ecb4086a65acc7d6f8

System and user configuration, managed by nix and home-manager

local-ca: enable non-caddy ACME clients

Alin
commit

58dffa0d966e07eefac139ecb4086a65acc7d6f8

parent

86eeb34b6604fa2a921f952c4fdecbf32de2afbb

3 files changed, 16 insertions(+), 2 deletions(-)

changed files
M system/roles/llm-server.nix → system/roles/llm-server.nix
@@ -67,8 +67,7 @@ services.caddy = {
     enable = true;
 
     globalConfig = ''
-      acme_ca https://ca.${domain}/directory
-      # acme_ca_root path_to_crt.crt
+      acme_ca https://acme.${domain}/directory
     '';
 
     virtualHosts = {
A system/roles/webserver/ca.crt
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
M system/roles/webserver/local-ca.nix → system/roles/webserver/local-ca.nix
@@ -6,6 +6,10 @@ let
   inherit (config.networking) domain fqdn;
 in
 {
+  security.pki.certificateFiles = [
+    ./ca.crt
+  ];
+
   services.caddy = {
     enable = true;
     globalConfig = ''