User:Jackrosenberg/Pangolin: Difference between revisions
→Prerequisites: are now a bit more clear |
Added the format of the setup token since it is specific |
||
| (One intermediate revision by one other user not shown) | |||
| Line 25: | Line 25: | ||
}; | }; | ||
}; | }; | ||
letsEncryptEmail = " | baseDomain = "example.com"; | ||
letsEncryptEmail = "john_doe@proton.me"; # an email you have access to | |||
openFirewall = true; | openFirewall = true; | ||
environmentFile = "/etc/nixos/secrets/pangolin.env"; | environmentFile = "/etc/nixos/secrets/pangolin.env"; | ||
| Line 31: | Line 32: | ||
} | } | ||
</nowiki> | |||
}} | |||
=== EnvironmentFile === | |||
Pangolin requires a [https://docs.pangolin.net/manage/sites/credentials#secret server secret], used for handshake authentication. Additionally, you may provide the setup token as shown below, which saves the trouble of finding it in logs with <code> journalctl -eu pangolin | grep token</code>. The format for the setup token<ref>https://github.com/fosrl/pangolin/blob/d4138e2141816669ad9b3b139f4b0db019ad26b4/server/setup/ensureSetupToken.ts#L19-L22</ref> is <code>^[a-z0-9]{32}$</code>. Naturally, don't use these secrets. | |||
{{file|pangolin.env|env| | |||
<nowiki> | |||
SERVER_SECRET=2w34etdr546rftygu8678yuhihg87objpvfctoyvihdr4u6 | |||
PANGOLIN_SETUP_TOKEN=123456789abcdefg | |||
</nowiki> | </nowiki> | ||
}} | }} | ||