Ensure ts certs are always valid for at least 7d

This commit is contained in:
SebastianStork 2024-09-14 15:01:54 +02:00
parent 5995b0628e
commit 27a438bef6

View file

@ -44,7 +44,7 @@ in
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
serviceConfig.Type = "oneshot"; serviceConfig.Type = "oneshot";
script = '' script = ''
${lib.getExe pkgs.tailscale} cert ${config.networking.fqdn} ${lib.getExe pkgs.tailscale} cert --min-validity=168h ${config.networking.fqdn}
${lib.getExe pkgs.tailscale} serve reset ${lib.getExe pkgs.tailscale} serve reset
${lib.getExe pkgs.tailscale} serve --bg ${cfg.serve} ${lib.getExe pkgs.tailscale} serve --bg ${cfg.serve}
''; '';