Nix/System
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refine wildcard to only tailnet domains

Browse source
This commit is contained in:
Nathan McCarty 2025-04-02 05:25:01 -04:00
parent 316ba904aa
commit 14d0fb13ed
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
nixos/machines/driftwood/configuration.nix
View file

@ -33,9 +33,9 @@
email = "admin@stranger.systems"; email = "admin@stranger.systems";
}; };
# Get a wildcard cert # Get a wildcard cert
certs."wildcard.stranger.systems" = { certs."tailnet.stranger.systems" = {
domain = "stranger.systems"; domain = "tailnet.stranger.systems";
extraDomainNames = ["*.stranger.systems"]; extraDomainNames = ["*.tailnet.stranger.systems"];
dnsProvider = "cloudflare"; dnsProvider = "cloudflare";
dnsPropagationCheck = true; dnsPropagationCheck = true;
credentialFiles = { credentialFiles = {

2
nixos/machines/driftwood/containers/hub.nix
View file

@ -16,7 +16,7 @@
services.nginx.virtualHosts."hub.tailnet.stranger.systems" = { services.nginx.virtualHosts."hub.tailnet.stranger.systems" = {
forceSSL = true; forceSSL = true;
useACMEHost = "wildcard.stranger.systems"; useACMEHost = "tailnet.stranger.systems";
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:8081"; proxyPass = "http://127.0.0.1:8081";
}; };