diff options
| author | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-04-16 00:04:06 +0200 |
|---|---|---|
| committer | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-04-16 00:04:06 +0200 |
| commit | dfb0e6df5ca2e045b45f2dce0a254b7444fb277f (patch) | |
| tree | 8b24005c7f38ad05d457995be54440a6369f5b2a /nixops | |
| parent | 415bcd272a0cbd65494fbb245bd94f0420656044 (diff) | |
| download | Nix-dfb0e6df5ca2e045b45f2dce0a254b7444fb277f.tar.gz Nix-dfb0e6df5ca2e045b45f2dce0a254b7444fb277f.tar.zst Nix-dfb0e6df5ca2e045b45f2dce0a254b7444fb277f.zip | |
Fix apache certificate chain containing the cert in double
Diffstat (limited to 'nixops')
| -rw-r--r-- | nixops/modules/websites/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixops/modules/websites/default.nix b/nixops/modules/websites/default.nix index f820c83..9782e68 100644 --- a/nixops/modules/websites/default.nix +++ b/nixops/modules/websites/default.nix | |||
| @@ -8,7 +8,7 @@ let | |||
| 8 | enableSSL = true; | 8 | enableSSL = true; |
| 9 | sslServerCert = "/var/lib/acme/${vhostConf.certName}/cert.pem"; | 9 | sslServerCert = "/var/lib/acme/${vhostConf.certName}/cert.pem"; |
| 10 | sslServerKey = "/var/lib/acme/${vhostConf.certName}/key.pem"; | 10 | sslServerKey = "/var/lib/acme/${vhostConf.certName}/key.pem"; |
| 11 | sslServerChain = "/var/lib/acme/${vhostConf.certName}/fullchain.pem"; | 11 | sslServerChain = "/var/lib/acme/${vhostConf.certName}/chain.pem"; |
| 12 | logFormat = "combinedVhost"; | 12 | logFormat = "combinedVhost"; |
| 13 | listen = map (ip: { inherit ip; port = 443; }) cfg.ips; | 13 | listen = map (ip: { inherit ip; port = 443; }) cfg.ips; |
| 14 | hostName = builtins.head vhostConf.hosts; | 14 | hostName = builtins.head vhostConf.hosts; |