From b2bd904bb65ee9cd6593ffed39969690ae73e7e1 Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Mon, 22 Jul 2024 00:47:26 -0700
Subject: Setup SSL

---
 roles/web/personal/default.nix | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'roles/web/personal/default.nix')

diff --git a/roles/web/personal/default.nix b/roles/web/personal/default.nix
index e036f98..16bf024 100644
--- a/roles/web/personal/default.nix
+++ b/roles/web/personal/default.nix
@@ -28,13 +28,17 @@ in {
   };
 
   config = mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = [ 80 ];
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
     
     services.nginx = {
       enable = true;
       virtualHosts = {
         "caroline.larimo.re" = {
-          serverAliases = [ "cxl.sh" "localhost" ];
+          serverAliases = [ "cxl.sh" ];
+
+          addSSL = true;
+          enableACME = true;
+
           locations."/" = {
             recommendedProxySettings = true;
             proxyPass = "http://localhost:8080/";
-- 
cgit v1.2.3