rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Skip ACME DNS propagation check for local resolver caching

Browse source 
Local DNS resolver caches stale responses causing the wildcard
cert DNS-01 challenge to time out before propagation is confirmed.
Cloudflare's authoritative servers propagate fast enough for
Let's Encrypt to validate without the client-side check.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
ediblerope 2026-04-14 22:33:13 +01:00
parent a109d5a5c7
commit 3c0746e23b
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
services/nginx.nix
View file

@ -62,6 +62,7 @@ in
domain = "*.nordhammer.it"; domain = "*.nordhammer.it";
extraDomainNames = [ "nordhammer.it" ]; extraDomainNames = [ "nordhammer.it" ];
dnsProvider = "cloudflare"; dnsProvider = "cloudflare";
dnsPropagationCheck = false;
credentialFiles = { credentialFiles = {
"CF_DNS_API_TOKEN_FILE" = "/var/secrets/cloudflare-token"; "CF_DNS_API_TOKEN_FILE" = "/var/secrets/cloudflare-token";
}; };