From b27d2913e80b1bb45a276f02706e7a18bee03480 Mon Sep 17 00:00:00 2001
From: ediblerope <fredrik@nordhammer.it>
Date: Tue, 7 Apr 2026 16:53:00 +0100
Subject: [PATCH] Disable ACME DNS propagation check for Cloudflare
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cloudflare is the authoritative NS so API-created TXT records are
immediately visible — the propagation poll was timing out unnecessarily.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 services/nginx.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/nginx.nix b/services/nginx.nix
index 68e4fd6..2d1eea6 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -64,6 +64,7 @@ in
         domain = "*.nordhammer.it";
         extraDomainNames = [ "nordhammer.it" ];
         dnsProvider = "cloudflare";
+        dnsPropagationCheck = false;
         credentialFiles = {
           "CF_DNS_API_TOKEN_FILE" = "/var/secrets/cloudflare-token";
         };