about summary refs log tree commit diff
path: root/ipfs.nix
diff options
context:
space:
mode:
authorNguyễn Gia Phong <mcsinyx@disroot.org>2023-02-12 02:14:43 +0900
committerNguyễn Gia Phong <mcsinyx@disroot.org>2023-02-12 02:14:43 +0900
commit426235c17e4d6557744701a86783907351708af7 (patch)
tree12cb32aafb06635a0ccf455012b3626aac985db1 /ipfs.nix
parent512571a3e9b4a690951db30cc027441452efc4a1 (diff)
downloadnixos-conf-426235c17e4d6557744701a86783907351708af7.tar.gz
Dogfood our authoritative DNS server
Diffstat (limited to 'ipfs.nix')
-rw-r--r--ipfs.nix10
1 files changed, 6 insertions, 4 deletions
diff --git a/ipfs.nix b/ipfs.nix
index d8c19c6..5122c67 100644
--- a/ipfs.nix
+++ b/ipfs.nix
@@ -26,11 +26,13 @@ in {
 
   security = {
     acme.certs.${domain} = {
-      credentialsFile = pkgs.writeText "namesilo.env" ''
-        NAMESILO_API_KEY_FILE=/var/lib/acme/namesilo.key
-        NAMESILO_PROPAGATION_TIMEOUT=1800
+      credentialsFile = pkgs.writeText "knot.env" ''
+        RFC2136_NAMESERVER=127.0.0.1
+        RFC2136_TSIG_KEY=lego
+        RFC2136_TSIG_ALGORITHM=hmac-sha256
+        RFC2136_TSIG_SECRET_FILE=/var/lib/acme/knot.secret
       '';
-      dnsProvider = "namesilo";
+      dnsProvider = "rfc2136";
       extraDomainNames = [
         "*.ipfs.${domain}"
         "*.ipns.${domain}"