From ece0da0f657a9f2034c8c46bcbe9921a896685b2 Mon Sep 17 00:00:00 2001
From: RGBCube <RGBCube@users.noreply.github.com>
Date: Wed, 10 Jan 2024 10:21:20 +0300
Subject: [PATCH] Force SSL and enable ACME

---
 flake.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 8b038ab..2594a32 100644
--- a/flake.nix
+++ b/flake.nix
@@ -149,7 +149,12 @@
           recommendedProxySettings = mkDefault true;
           recommendedTlsSettings   = mkDefault true;
 
-          virtualHosts.${urlStripped}.proxyPass = "http://127.0.0.1:${cfg.port}";
+          virtualHosts.${urlStripped} = {
+            enableACME = true;
+            forceSSL   = true;
+
+            proxyPass = "http://127.0.0.1:${cfg.port}";
+          };
         };
 
         systemd.services.site = {