summary refs log tree commit diff
path: root/nixos/modules/services/web-servers/nginx
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2016-02-08 06:12:49 +0100
committerRobin Gloster <mail@glob.in>2016-07-28 11:59:13 +0000
commitd5a097fdb609ec5ffb09bcab632e4b2a03ae05ca (patch)
tree09878b54fec929e0f229a8bb0ac03097736de9e9 /nixos/modules/services/web-servers/nginx
parentc61157b7e6512036a7abc04a45df334162b3b111 (diff)
downloadnixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar
nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.gz
nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.bz2
nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.lz
nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.xz
nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.tar.zst
nixlib-d5a097fdb609ec5ffb09bcab632e4b2a03ae05ca.zip
nginx module: Don't create acme certs if acme is not enabled
Diffstat (limited to 'nixos/modules/services/web-servers/nginx')
-rw-r--r--nixos/modules/services/web-servers/nginx/default.nix12
1 files changed, 8 insertions, 4 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix
index e369505fbc31..18fce9672dda 100644
--- a/nixos/modules/services/web-servers/nginx/default.nix
+++ b/nixos/modules/services/web-servers/nginx/default.nix
@@ -248,10 +248,14 @@ in
       };
     };
 
-    security.acme.certs = mapAttrs (vhostName: vhostConfig: {
-      webroot = vhostConfig.acmeRoot;
-      extraDomains = genAttrs vhostConfig.serverAliases (alias: null);
-    }) virtualHosts;
+    security.acme.certs = filterAttrs (n: v: v != {}) (
+      mapAttrs (vhostName: vhostConfig:
+        optionalAttrs vhostConfig.enableACME {
+          webroot = vhostConfig.acmeRoot;
+          extraDomains = genAttrs vhostConfig.serverAliases (alias: null);
+        }
+      ) virtualHosts
+    );
 
 
     users.extraUsers = optionalAttrs (cfg.user == "nginx") (singleton