rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove broken --dns.propagation-wait flag, rely on default propagation check

Browse source 
The CNAME interference is resolved so the default lego propagation check
(querying Cloudflare authoritative NS) should work correctly now.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ediblerope 2026-04-07 17:20:19 +01:00
parent 476379f4e4
commit 9ce1e00ea5
1 changed files with 0 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
services/nginx.nix
View file

@ -64,9 +64,6 @@ in
domain = "*.nordhammer.it"; domain = "*.nordhammer.it";
extraDomainNames = [ "nordhammer.it" ]; extraDomainNames = [ "nordhammer.it" ];
dnsProvider = "cloudflare"; dnsProvider = "cloudflare";
# Wait 30s after creating the TXT record before asking LE to validate
extraLegoRunFlags = [ "--dns.propagation-wait" "30s" ];
extraLegoRenewFlags = [ "--dns.propagation-wait" "30s" ];
credentialFiles = { credentialFiles = {
"CF_DNS_API_TOKEN_FILE" = "/var/secrets/cloudflare-token"; "CF_DNS_API_TOKEN_FILE" = "/var/secrets/cloudflare-token";
}; };