Added context for explicit DNS resolver
This commit is contained in:
parent
a128ade0e8
commit
35906841d8
|
@ -49,6 +49,10 @@ in {
|
||||||
# Wildcard cert
|
# Wildcard cert
|
||||||
certs."kilonull.com" = {
|
certs."kilonull.com" = {
|
||||||
dnsProvider = "cloudflare";
|
dnsProvider = "cloudflare";
|
||||||
|
# Private network resolves *.kilonull.com to private servers but `lego`
|
||||||
|
# (acme client under the hood) needs to find the cloudflare nameservers
|
||||||
|
# to determine the correct zone to apply changes in. Use cloudflare's
|
||||||
|
# own DNS to make `lego` happy (will resolve names to a public IP).
|
||||||
dnsResolver = "1.1.1.1:53";
|
dnsResolver = "1.1.1.1:53";
|
||||||
credentialsFile = config.age.secrets.cf_dns_kilonull.path;
|
credentialsFile = config.age.secrets.cf_dns_kilonull.path;
|
||||||
extraDomainNames = ["*.kilonull.com"];
|
extraDomainNames = ["*.kilonull.com"];
|
||||||
|
|
Loading…
Reference in a new issue