From f3a78189af1acec3fe54bb35b9db259cd7e6cef3 Mon Sep 17 00:00:00 2001
From: EuAndreh <eu@euandre.org>
Date: Sat, 15 Aug 2020 19:53:13 -0300
Subject: Use letsencrypt to generate the TLS certificate

---
 vps-configuration.env.nix | 15 ++++-----------
 1 file changed, 4 insertions(+), 11 deletions(-)

(limited to 'vps-configuration.env.nix')

diff --git a/vps-configuration.env.nix b/vps-configuration.env.nix
index ad24f83..a521bc7 100644
--- a/vps-configuration.env.nix
+++ b/vps-configuration.env.nix
@@ -73,17 +73,6 @@ in {
   security.acme = {
     acceptTerms = true;
     email = envsubstConfiguration.letsencryptEmail;
-    certs = {
-      "${envsubstConfiguration.prosodyTLD}" = {
-        webroot = "/var/www/${envsubstConfiguration.prosodyTLD}";
-        user = "prosody";
-        group = "prosody";
-        extraDomains = {
-          "${envsubstConfiguration.prosodyMUCTLD}" = null;
-          "${envsubstConfiguration.prosodyHTTPUploadTLD}" = null;
-        };
-      };
-    };
   };
 
   services = {
@@ -116,6 +105,10 @@ in {
           enableACME = true;
           root = boneco;
         };
+        "${envsubstConfiguration.prosodyTLD}" = {
+          forceSSL = true;
+          enableACME = true;
+        };
       };
     };
 
-- 
cgit v1.2.3