From 22c807f45126787455dedb671b25fa27b74436b7 Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Tue, 3 Mar 2026 15:11:18 -0800
Subject: cgit: ssl switch for local testing

---
 modules/nixos/services/web/cgit/default.nix | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

(limited to 'modules/nixos/services/web/cgit/default.nix')

diff --git a/modules/nixos/services/web/cgit/default.nix b/modules/nixos/services/web/cgit/default.nix
index e33971e..d1a7d85 100644
--- a/modules/nixos/services/web/cgit/default.nix
+++ b/modules/nixos/services/web/cgit/default.nix
@@ -11,6 +11,11 @@ in {
       type = str;
     };
 
+    ssl = mkOption {
+      type = bool;
+      default = true;
+    };
+
     path = mkOption {
       type = path;
       default = "/srv/git";
@@ -69,12 +74,12 @@ in {
       enable = true;
       virtualHosts = {
         "${cfg.virtualHost}" = {
-          addSSL = true;
-          enableACME = true;
+          addSSL = cfg.ssl;
+          enableACME = cfg.ssl;
         };
         "private.${cfg.virtualHost}" = {
-          addSSL = true;
-          enableACME = true;
+          addSSL = cfg.ssl;
+          enableACME = cfg.ssl;
 
           extraConfig = ''
             ssl_client_certificate ${./ca.crt};
-- 
cgit v1.2.3