fix(vpn): generate certificate & configure nginx for tailnet
This commit is contained in:
parent
d0bccd67bd
commit
41a222bc8f
|
@ -34,5 +34,12 @@ in {
|
||||||
|
|
||||||
# some options cannot be set immediately
|
# some options cannot be set immediately
|
||||||
${cfg.package}/bin/tailscale up ${lib.escapeShellArgs cfg.extraUpFlags}
|
${cfg.package}/bin/tailscale up ${lib.escapeShellArgs cfg.extraUpFlags}
|
||||||
|
|
||||||
|
${cfg.package}/bin/tailscale cert ${tailnetHost}
|
||||||
'';
|
'';
|
||||||
|
|
||||||
|
services.nginx.virtualHosts.${tailnetHost} = {
|
||||||
|
sslCertificate = "/var/lib/tailscale/certs/${tailnetHost}.key";
|
||||||
|
sslCertificateKey = "/var/lib/tailscale/certs/${tailnetHost}.crt";
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue