diff options
author | Janne Heß <janne@hess.ooo> | 2021-11-26 13:58:40 +0100 |
---|---|---|
committer | Janne Heß <janne@hess.ooo> | 2021-12-07 14:17:56 +0100 |
commit | e37aab2130e4a42660bef203592069cb05d3fe3e (patch) | |
tree | c178ad792b34163cb6ea618a64a8f89014c8e068 /nixos/modules/security | |
parent | 08586ff5921e9511a5eef8259ac334063d718ce7 (diff) | |
download | nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.tar nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.tar.gz nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.tar.bz2 nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.tar.lz nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.tar.xz nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.tar.zst nixpkgs-e37aab2130e4a42660bef203592069cb05d3fe3e.zip |
nixos/acme: Allow disabling bash tracing
This is horrible if you want to debug failures that happened during system switches but your 30-ish acme clients spam the log with the same messages over and over again.
Diffstat (limited to 'nixos/modules/security')
-rw-r--r-- | nixos/modules/security/acme.nix | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/nixos/modules/security/acme.nix b/nixos/modules/security/acme.nix index 2815e2593b2..12ebc746f52 100644 --- a/nixos/modules/security/acme.nix +++ b/nixos/modules/security/acme.nix @@ -325,7 +325,8 @@ let # Working directory will be /tmp script = '' - set -euxo pipefail + ${optionalString data.enableDebugLogs "set -x"} + set -euo pipefail # This reimplements the expiration date check, but without querying # the acme server first. By doing this offline, we avoid errors @@ -438,6 +439,8 @@ let default = "_mkMergedOptionModule"; }; + enableDebugLogs = mkEnableOption "debug logging for this certificate" // { default = cfg.enableDebugLogs; }; + webroot = mkOption { type = types.nullOr types.str; default = null; @@ -616,6 +619,8 @@ in { options = { security.acme = { + enableDebugLogs = mkEnableOption "debug logging for all certificates by default" // { default = true; }; + validMinDays = mkOption { type = types.int; default = 30; |