NullCube/permafrost
1
0
Fork 0
forked from Zynh0722/permafrost
Code Pull requests Activity

nginx: force ssl

Browse source
This commit is contained in:
Zynh Ludwig 2024-12-27 21:50:05 -08:00
parent de4f48353e
commit 0eb63c5e9b
3 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
modules/forgejo.nix
View file

@ -13,8 +13,7 @@ in
permafrost.nginx.enable = lib.mkDefault true; permafrost.nginx.enable = lib.mkDefault true;
permafrost.nginx.certDomains = lib.mkIf ACMEEnabled [ "git.zynh.me" ]; permafrost.nginx.certDomains = lib.mkIf ACMEEnabled [ "git.zynh.me" ];
services.nginx.virtualHosts."git.zynh.me" = { services.nginx.virtualHosts."git.zynh.me" = {
# TODO: Force ssl forceSSL = lib.mkIf ACMEEnabled true;
# addSSL = true;
serverName = "git.zynh.me"; serverName = "git.zynh.me";
useACMEHost = lib.mkIf ACMEEnabled "permafrost"; useACMEHost = lib.mkIf ACMEEnabled "permafrost";
locations."/" = { locations."/" = {

3
modules/foundry.nix
View file

@ -16,8 +16,7 @@ in
{ {
# permafrost.nginx.certDomains = lib.mkIf ACMEEnabled [ "scarlet.zynh.me" ]; # permafrost.nginx.certDomains = lib.mkIf ACMEEnabled [ "scarlet.zynh.me" ];
services.nginx.virtualHosts."scarlet.zynh.me" = { services.nginx.virtualHosts."scarlet.zynh.me" = {
# TODO: Force ssl forceSSL = lib.mkIf ACMEEnabled true;
# addSSL = true;
serverName = "scarlet.zynh.me"; serverName = "scarlet.zynh.me";
useACMEHost = lib.mkIf ACMEEnabled "permafrost"; useACMEHost = lib.mkIf ACMEEnabled "permafrost";
locations."/.well-known/acme-challenge" = { locations."/.well-known/acme-challenge" = {

2
modules/nyazoom.nix
View file

@ -27,9 +27,9 @@ in
services.nginx.virtualHosts."nyazoom.zynh.me" = { services.nginx.virtualHosts."nyazoom.zynh.me" = {
# TODO: Force ssl # TODO: Force ssl
# TODO: Force ssl # TODO: Force ssl
# addSSL = true;
serverName = "nyazoom.zynh.me"; serverName = "nyazoom.zynh.me";
useACMEHost = lib.mkIf ACMEEnabled "permafrost"; useACMEHost = lib.mkIf ACMEEnabled "permafrost";
forceSSL = lib.mkIf ACMEEnabled true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:3000"; proxyPass = "http://localhost:3000";
extraConfig = /* nginx */ '' extraConfig = /* nginx */ ''