From b2bd904bb65ee9cd6593ffed39969690ae73e7e1 Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Mon, 22 Jul 2024 00:47:26 -0700
Subject: Setup SSL

---
 roles/web/stargazers/default.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

(limited to 'roles/web/stargazers')

diff --git a/roles/web/stargazers/default.nix b/roles/web/stargazers/default.nix
index b7cca11..644f91f 100644
--- a/roles/web/stargazers/default.nix
+++ b/roles/web/stargazers/default.nix
@@ -7,12 +7,17 @@ let cfg = config.roles.web.stargazers; in {
   };
 
   config = mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = [ 80 ];
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
     
     services.nginx = {
       enable = true;
       virtualHosts = {
-        "stargazers.xn--6frz82g".root = "/srv/web/stargazers";
+        "stargazers.xn--6frz82g" = {
+          addSSL = true;
+          enableACME = true;
+
+          root = "/srv/web/stargazers";
+        };
       };
     };
   };
-- 
cgit v1.2.3