Nginx: Difference between revisions

imported>Samueldr
Adds a troubleshooting note for ACME certs and nginx.
imported>Samueldr
m Misc. templates use
Line 1: Line 1:
Nginx is a lightweight webserver. Configuration is handled using the [https://nixos.org/nixos/options.html#services.nginx. services.nginx] options.
Nginx is a lightweight webserver. Configuration is handled using the {{nixos:option|services.nginx.}} options.


== Let's Encrypt certificates ==
== Let's Encrypt certificates ==


The nginx module for NixOS has [https://nixos.org/nixos/options.html#services.nginx.+acme native support for Let's encrypt] certificates. [https://nixos.org/nixos/manual/#module-security-acme The manual, chapter 20] explains it in details.
The nginx module for NixOS has native support for Let's encrypt certificates;  {{nixos:option|services.nginx.+acme}}. The {{manual:nixos|sec=#module-security-acme|chapter=Chapter 20. SSL/TLS Certificates with ACME}} explains it in detail.


=== Troubleshooting ===
=== Troubleshooting ===
Line 9: Line 9:
==== Rate limiting ====
==== Rate limiting ====


The ACME server for Let's encrypt has rate limits. There is a known issue<ref>https://github.com/NixOS/nixpkgs/issues/38144</ref> with how NixOS handles automatic certificate generation wherein it is trivial to hit the limits when enabling multiple domains or sub-domains at once.
The ACME server for Let's encrypt has rate limits. There is a known issue<ref>{{issue|38144}}</ref> with how NixOS handles automatic certificate generation wherein it is trivial to hit the limits when enabling multiple domains or sub-domains at once.


When hitting the limit, the logs will show as follows:
When hitting the limit, the logs will show as follows: