diff options
author | Franz Pletz <fpletz@fnordicwalking.de> | 2016-02-08 06:12:49 +0100 |
---|---|---|
committer | Robin Gloster <mail@glob.in> | 2016-07-28 11:59:13 +0000 |
commit | d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca (patch) | |
tree | 09878b54fec929e0f229a8bb0ac03097736de9e9 /nixos/modules/services/web-servers/nginx/default.nix | |
parent | c61157b7e6512036a7abc04a45df334162b3b111 (diff) | |
download | nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.gz nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.bz2 nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.lz nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.xz nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.zst nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.zip |
nginx module: Don't create acme certs if acme is not enabled
Diffstat (limited to 'nixos/modules/services/web-servers/nginx/default.nix')
-rw-r--r-- | nixos/modules/services/web-servers/nginx/default.nix | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index e369505fbc31..18fce9672dda 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -248,10 +248,14 @@ in }; }; - security.acme.certs = mapAttrs (vhostName: vhostConfig: { - webroot = vhostConfig.acmeRoot; - extraDomains = genAttrs vhostConfig.serverAliases (alias: null); - }) virtualHosts; + security.acme.certs = filterAttrs (n: v: v != {}) ( + mapAttrs (vhostName: vhostConfig: + optionalAttrs vhostConfig.enableACME { + webroot = vhostConfig.acmeRoot; + extraDomains = genAttrs vhostConfig.serverAliases (alias: null); + } + ) virtualHosts + ); users.extraUsers = optionalAttrs (cfg.user == "nginx") (singleton |