chore: disable records for default vHost

This commit is contained in:
Julien Malka 2024-08-13 20:21:40 +02:00
parent fdb63444b0
commit c6c8197af9
Signed by: Luj
GPG key ID: 6FC74C847011FD83

View file

@ -1,6 +1,7 @@
{ lib, config, ... }: { lib, config, ... }:
with lib; with lib;
let cfg = config.luj.nginx; let
cfg = config.luj.nginx;
in in
{ {
@ -14,10 +15,15 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [
80
443
];
security.acme.defaults.email = "${cfg.email}"; security.acme.defaults.email = "${cfg.email}";
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
users.groups.nginx = { name = "nginx"; }; users.groups.nginx = {
name = "nginx";
};
services.nginx = { services.nginx = {
enable = true; enable = true;
@ -38,8 +44,7 @@ in
}; };
}; };
machine.meta.zones."julienmalka.me".subdomains."404" = lib.mkForce { };
}; };
} }