force ssl everywhere instead of adding the option
This commit is contained in:
parent
831be9197c
commit
f1af82968b
3 changed files with 3 additions and 3 deletions
|
@ -108,7 +108,7 @@ in
|
||||||
|
|
||||||
# Take advice from https://jellyfin.org/docs/general/networking/nginx/ and https://nixos.wiki/wiki/Plex
|
# Take advice from https://jellyfin.org/docs/general/networking/nginx/ and https://nixos.wiki/wiki/Plex
|
||||||
services.nginx.virtualHosts."${fqdn}" = {
|
services.nginx.virtualHosts."${fqdn}" = {
|
||||||
addSSL = true;
|
forceSSL = true;
|
||||||
http2 = true;
|
http2 = true;
|
||||||
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
||||||
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
||||||
|
|
|
@ -78,7 +78,7 @@ in
|
||||||
# recommendedProxySettings = true;
|
# recommendedProxySettings = true;
|
||||||
|
|
||||||
virtualHosts.${fqdn} = {
|
virtualHosts.${fqdn} = {
|
||||||
addSSL = true;
|
forceSSL = true;
|
||||||
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
||||||
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
||||||
locations."/" = {
|
locations."/" = {
|
||||||
|
|
|
@ -113,7 +113,7 @@ in
|
||||||
# listen = [ { addr = "0.0.0.0"; port = 443; } ];
|
# listen = [ { addr = "0.0.0.0"; port = 443; } ];
|
||||||
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
||||||
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
||||||
addSSL = true;
|
forceSSL = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
systemd.services.phpfpm-nextcloud.serviceConfig = {
|
systemd.services.phpfpm-nextcloud.serviceConfig = {
|
||||||
|
|
Loading…
Reference in a new issue