summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorsinanmohd <sinan@sinanmohd.com>2024-02-27 16:50:06 +0530
committersinanmohd <sinan@sinanmohd.com>2024-02-27 16:50:06 +0530
commita41347e971a5b7498d12e47b25895faf4feb2bd8 (patch)
tree64b7ad86af50466314ffb8d77abcf68e9ddae3e1 /hosts
parentc2078d3e8be3bec0248c3f272ec6bebf46093196 (diff)
kay/acme/rfc2136: reload dependencies after cert fetch
Diffstat (limited to 'hosts')
-rw-r--r--hosts/kay/modules/mail.nix1
-rw-r--r--hosts/kay/modules/www.nix1
2 files changed, 2 insertions, 0 deletions
diff --git a/hosts/kay/modules/mail.nix b/hosts/kay/modules/mail.nix
index b255650..cd47d39 100644
--- a/hosts/kay/modules/mail.nix
+++ b/hosts/kay/modules/mail.nix
@@ -24,6 +24,7 @@ in {
4190 # managesieve
];
+ security.acme.certs.${domain}.postRun = "systemctl restart stalwart-mail.service";
sops.secrets = {
"mail.${domain}/dkim_rsa" = {};
"mail.${domain}/dkim_ed25519" = {};
diff --git a/hosts/kay/modules/www.nix b/hosts/kay/modules/www.nix
index 1447b1e..3891bf6 100644
--- a/hosts/kay/modules/www.nix
+++ b/hosts/kay/modules/www.nix
@@ -13,6 +13,7 @@ in
./cgit.nix
];
+ security.acme.certs.${domain}.postRun = "systemctl reload nginx.service";
networking.firewall = {
allowedTCPPorts = [ 80 443 ];
allowedUDPPorts = [ 443 ];