From ada5e5ad6a4944cf3f8a0ddfbd4b1a801860397c Mon Sep 17 00:00:00 2001
From: Anish Lakhwara <anish+git@lakhwara.com>
Date: Wed, 21 Sep 2022 01:32:09 +1000
Subject: [PATCH] add acme registration to server config

---
 profiles/server/default.nix | 3 +++
 profiles/site/default.nix   | 1 +
 2 files changed, 4 insertions(+)

diff --git a/profiles/server/default.nix b/profiles/server/default.nix
index 34ea2db8..5fc374f7 100644
--- a/profiles/server/default.nix
+++ b/profiles/server/default.nix
@@ -7,4 +7,7 @@
   };
   networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website
   security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
+
+  security.acme.defaults.email = "anish+acme@lakhwara.com";
+  security.acme.acceptTerms = true;
 }
diff --git a/profiles/site/default.nix b/profiles/site/default.nix
index 18a074ed..7f16ca1a 100644
--- a/profiles/site/default.nix
+++ b/profiles/site/default.nix
@@ -1,6 +1,7 @@
 { self, pkgs, ... }:
 {
   services."anish.lakhwara.com".enable = true;
+  services."anish.lakhwara.com".enableSSL = true;
   security.acme.email = "anish+acme@lakhwara.com";
   security.acme.acceptTerms = true;
 }