felschr/nixos-config
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

fix(vpn): generate certificate & configure nginx for tailnet

Browse source
This commit is contained in:
Felix Schröter 2024-01-21 21:41:21 +01:00
parent d0bccd67bd
commit 41a222bc8f
Signed by: felschr
GPG key ID: 671E39E6744C807D
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
system/vpn.nix
View file

@ -34,5 +34,12 @@ in {
# some options cannot be set immediately
${cfg.package}/bin/tailscale up ${lib.escapeShellArgs cfg.extraUpFlags}
${cfg.package}/bin/tailscale cert ${tailnetHost}
'';
services.nginx.virtualHosts.${tailnetHost} = {
sslCertificate = "/var/lib/tailscale/certs/${tailnetHost}.key";
sslCertificateKey = "/var/lib/tailscale/certs/${tailnetHost}.crt";
};
}