✨ [pi4] Fix nginx config with TLS

2025-06-08 21:32:52 +00:00
parent eb8c857940
commit a277e8f3ed
3 changed files with 14 additions and 17 deletions
--- a/hosts/pi4/nextcloud.nix
+++ b/hosts/pi4/nextcloud.nix
@ -12,6 +12,11 @@ let
  dbuser = dbname;
 in
 {
+  security.acme = {
+    acceptTerms = true;
+    certs.${config.services.nextcloud.hostName}.email = "acme@${common.domain}";
+  };
+
  services = {
    nextcloud = {
      enable = true;
@ -52,6 +57,11 @@ in
      };
    };

+    nginx.virtualHosts.${config.services.nextcloud.hostName} = {
+      forceSSL = true;
+      enableACME = true;
+    };
+
    postgresql = {
      enable = true;
      ensureDatabases = [ dbname ];