Post

@vincent.bernat.ch

nginx configuration is always a bit too cumbersome/inflexible. Notably, header inheritance is a pain (even with the new option to merge headers). So, I switched to Caddy.

github.comnixops-take1/modules/caddy.nix at master · vincentbernat/nixops-take1Playground for NixOps. Contribute to vincentbernat/nixops-take1 development by creating an account on GitHub.

StepBroBD

@stepbrobd.com

btw you can try github.com/stepbrobd/ce... plugin to get a shared storage location for all certs (and other parts that uses caddy certmagic storage backend) i forked the og repo and added proper locking mechanism during cert renewal

github.comGitHub - stepbrobd/certmagic-s3: forked from ss098/certmagic-s3forked from ss098/certmagic-s3. Contribute to stepbrobd/certmagic-s3 development by creating an account on GitHub.

20/10/26, 11:32 am1 repost1 like

Vincent Bernat

@vincent.bernat.ch

Thanks. Eventually, I have implemented fetching the certificates from my workstation and pushing them to avoid too much infra dependencies. The day I die, the certificates will die with me! github.com/vincentberna...

github.comnixops-take1/flake.nix at master · vincentbernat/nixops-take1Playground for NixOps. Contribute to vincentbernat/nixops-take1 development by creating an account on GitHub.