nixos/portunus: make sure the cookies are only send over https if it is enabled

This commit is contained in:
Sandro Jäckel 2023-11-07 21:29:57 +01:00
parent 589aab59f1
commit 64b6b5e787
No known key found for this signature in database
GPG Key ID: 3AF5A43A3EECC2E5

View File

@ -247,6 +247,7 @@ in
acmeDirectory = config.security.acme.certs."${cfg.domain}".directory;
in
{
PORTUNUS_SERVER_HTTP_SECURE = "true";
PORTUNUS_SLAPD_TLS_CA_CERTIFICATE = "/etc/ssl/certs/ca-certificates.crt";
PORTUNUS_SLAPD_TLS_CERTIFICATE = "${acmeDirectory}/cert.pem";
PORTUNUS_SLAPD_TLS_DOMAIN_NAME = cfg.domain;