alerts.pub.solar: use DNS challenge for cert

2024-09-10 14:27:35 +02:00 · 2024-09-10 14:27:35 +02:00 · 63fa03e971
parent faa71b7797
commit 63fa03e971
1 changed files with 9 additions and 0 deletions
--- a/modules/prometheus/default.nix
+++ b/modules/prometheus/default.nix
@ -12,6 +12,15 @@
    owner = "alertmanager";
  };

+  security.acme.certs = {
+    "alerts.${config.pub-solar-os.networking.domain}" = {
+      # disable http challenge
+      webroot = null;
+      # enable dns challenge
+      dnsProvider = "namecheap";
+    };
+  };
+
  services.nginx.virtualHosts."alerts.${config.pub-solar-os.networking.domain}" = {
    enableACME = true;
    forceSSL = true;