reverse-proxy: use EU-issued ACME TLS certificate issuer
1 file changed, 7 insertions(+), 5 deletions(-)
changed files
M system/roles/goatcounter.nix → system/roles/goatcounter.nix
@@ -36,15 +36,17 @@ let srv = config.services.goatcounter; in { - useACMEHost = "stats.${domain}"; - serverAliases = [ "*.stats.${domain}" ]; + # TODO: switch to on-demand TLS + # useACMEHost = "stats.${domain}"; + # serverAliases = [ "*.stats.${domain}" ]; extraConfig = '' reverse_proxy ${srv.address}:${toString srv.port} ''; }; }; - security.acme.certs."stats.${domain}" = { - extraDomainNames = [ "*.stats.${domain}" ]; - }; + ## actalis doesn't allow wildcard on free tier + # security.acme.certs."stats.${domain}" = { + # extraDomainNames = [ "*.stats.${domain}" ]; + # }; }