Add new TLS configuration for cache-staging.nixos.org
Martin Weinelt committed
Nov 14, 2025 at 04:10 UTC
ddbfcbf84943483416989e79b193d9a16c00392a
2 files changed
+7
dns/nixos.org.js
+1
@@ -42,6 +42,7 @@ D("nixos.org",
42
TXT("mail._domainkey.discourse", "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDmxDhMfDl6lnueSRCjYiWIDeTAJXR9Yw0PfpBfG7GPUIkMyqy9jVGpb4ECVTt9S1zfpr4dbtCgir781oVwZiwGIWzC8y8XsD37wernQIPN4Yubnrnpw+6lill4uA/AuyU/ghbeZ5lW03pHD//2EW4YEu+Jw4aS4rF0Wtk+BlJRCwIDAQAB"),
43
44
// fastly
45
+ CNAME("_acme-challenge.cache-staging", "kqwx9cvuf7lvjo8u9b.fastly-validations.com"),
46
CNAME("_acme-challenge.channels", "9u55qij5w2odiwqxfi.fastly-validations.com."),
47
CNAME("_acme-challenge.artifacts", "bsk6mjvi6b1r6wekb0.fastly-validations.com."),
48
CNAME("_acme-challenge.releases", "s731ezp9ameh5f349b.fastly-validations.com."),
terraform/cache-staging.tf
+6
@@ -352,3 +352,9 @@ resource "fastly_tls_subscription" "cache-staging" {
352
configuration_id = local.fastly_tls12_sni_configuration_id
353
certificate_authority = "globalsign"
354
}
355
+
356
+resource "fastly_tls_subscription" "cache-staging-2025-11" {
357
+ domains = [for domain in fastly_service_vcl.cache-staging.domain : domain.name]
358
+ configuration_id = local.fastly_tls13_quic_configuration_id
359
+ certificate_authority = "lets-encrypt"
360
+}