nixpkgs/nixos/modules
Emily 7b14bbd734 nixos/acme: adjust renewal timer options
The current weekly setting causes every NixOS server to try to renew
its certificate at midnight on the dot on Monday. This contributes to
the general problem of periodic load spikes for Let's Encrypt; NixOS
is probably not a major contributor to that problem, but we can lead by
example by picking good defaults here.

The values here were chosen after consulting with @yuriks, an SRE at
Let's Encrypt:

* Randomize the time certificates are renewed within a 24 hour period.

* Check for renewal every 24 hours, to ensure the certificate is always
  renewed before an expiry notice is sent out.

* Increase the AccuracySec (thus lowering the accuracy(!)), so that
  systemd can coalesce the renewal with other timers being run.

  (You might be worried that this would defeat the purpose of the time
  skewing, but systemd is documented as avoiding this by picking a
  random time.)
2020-02-29 14:03:36 +00:00
..
config Merge pull request #71079 from gnidorah/theming 2020-02-21 18:52:52 +01:00
hardware nixos/brightnessctl: Remove the module 2020-02-10 23:18:20 +01:00
i18n/input-method nixos/ibus: fix missing dconf profile 2020-01-06 20:30:37 +09:00
installer nix: 2.3.2 -> 2.3.3 2020-02-19 01:54:25 +01:00
misc nixos/modules/misc/version.nix: Don't parse .git 2020-02-15 20:16:14 +01:00
profiles nixos/plasma5: drop enableQt4Support option 2019-11-22 09:01:05 +01:00
programs Merge pull request #80456 from cole-h/fish 2020-02-20 07:43:25 +01:00
security nixos/acme: adjust renewal timer options 2020-02-29 14:03:36 +00:00
services Merge pull request #80758 from ikervagyok/wg 2020-02-22 10:20:13 +01:00
system grub: Update extraConfig example text (#79406) 2020-02-15 16:45:47 -05:00
tasks Merge pull request #53033 from netixx/openvswitch-improved-systemd 2020-02-21 08:24:49 +00:00
testing nixos/testing: remove leftover of virtualisation.qemu.program 2019-08-29 10:12:13 +02:00
virtualisation Merge pull request #53033 from netixx/openvswitch-improved-systemd 2020-02-21 08:24:49 +00:00
module-list.nix Merge pull request #71079 from gnidorah/theming 2020-02-21 18:52:52 +01:00
rename.nix nixos/brightnessctl: Remove the module 2020-02-10 23:18:20 +01:00