Added context for explicit DNS resolver

2023-07-09 08:28:55 -07:00 · 2023-07-09 08:28:55 -07:00 · 35906841d8
parent a128ade0e8
commit 35906841d8
1 changed files with 4 additions and 0 deletions
--- a/modules/services/adguardhome/default.nix
+++ b/modules/services/adguardhome/default.nix
@ -49,6 +49,10 @@ in {
      # Wildcard cert
      certs."kilonull.com" = {
        dnsProvider = "cloudflare";
+        # Private network resolves *.kilonull.com to private servers but `lego`
+        # (acme client under the hood) needs to find the cloudflare nameservers
+        # to determine the correct zone to apply changes in. Use cloudflare's
+        # own DNS to make `lego` happy (will resolve names to a public IP).
        dnsResolver = "1.1.1.1:53";
        credentialsFile = config.age.secrets.cf_dns_kilonull.path;
        extraDomainNames = ["*.kilonull.com"];