maralorn/nixos-config
1
0
Fork 0
Code Wiki Activity

finally fix acme warning

Browse source
This commit is contained in:
Malte Brandy 2022-06-03 17:16:59 +02:00
parent ca2b303d94
commit 54f93c3a18
1 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
nixos/roles/coturn.nix
View file

@ -1,10 +1,14 @@
{
config,
pkgs,
lib,
...
}: let
fqdn = "${config.networking.hostName}.${config.networking.domain}";
key_dir = config.security.acme.certs."${fqdn}".directory;
key_dir =
if pkgs.withSecrets
then config.security.acme.certs."${fqdn}".directory
else "/dummy-dir/";
in {
users.users.turnserver.extraGroups = ["nginx"]; # For read access to certs;
networking.firewall = let
@ -26,8 +30,8 @@ in {
allowedTCPPorts = ports;
allowedUDPPorts = ports;
};
security.acme.certs."${fqdn}" = {
postRun = "systemctl restart coturn.service";
security.acme.certs = lib.mkIf pkgs.withSecrets {
"${fqdn}".postRun = "systemctl restart coturn.service";
};
services = {
coturn = {