From 36bda6965ab2e1a206f8c2b7a74f3b022c873662 Mon Sep 17 00:00:00 2001 From: Anish Lakhwara Date: Tue, 20 Sep 2022 19:21:22 +1000 Subject: [PATCH] enable ssl --- flake.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/flake.nix b/flake.nix index 8893b20..8052b87 100644 --- a/flake.nix +++ b/flake.nix @@ -69,6 +69,7 @@ serviceConfig = config.services."${serverName}"; options = { enable = lib.mkEnableOption "${serverName} service"; + enableSSL = lib.mkEnableOption "${serverName} SSL for Nginx"; }; in { @@ -95,8 +96,8 @@ networking.firewall.allowedTCPPorts = [ 80 ]; services.nginx.enable = true; services.nginx.virtualHosts.${serverName} = { - #forceSSL = true; - enableACME = true; + forceSSL = serviceConfig.enableSSL; + enableACME = serviceConfig.enableSSL; locations."/" = { root = "${webRoot}${serverName}"; index = "/home.html"; }; }; };