rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

acme: use public DNS resolver for lego zone detection

Browse source
This commit is contained in:
rope 2026-07-13 22:37:46 +01:00
parent 659934fdf6
commit d7657e191d
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
services/nginx.nix
View file

@ -62,6 +62,8 @@ in
domain = "*.nordhammer.it";
extraDomainNames = [ "nordhammer.it" ];
dnsProvider = "cloudflare";
# AdGuard's local rewrite swallows SOA lookups, breaking lego's zone detection
dnsResolver = "1.1.1.1:53";
credentialFiles = {
"CF_DNS_API_TOKEN_FILE" = "/var/secrets/cloudflare-token";
};