force ssl everywhere instead of adding the option
This commit is contained in:
parent
831be9197c
commit
f1af82968b
3 changed files with 3 additions and 3 deletions
|
@ -108,7 +108,7 @@ in
|
|||
|
||||
# Take advice from https://jellyfin.org/docs/general/networking/nginx/ and https://nixos.wiki/wiki/Plex
|
||||
services.nginx.virtualHosts."${fqdn}" = {
|
||||
addSSL = true;
|
||||
forceSSL = true;
|
||||
http2 = true;
|
||||
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
||||
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
||||
|
|
|
@ -78,7 +78,7 @@ in
|
|||
# recommendedProxySettings = true;
|
||||
|
||||
virtualHosts.${fqdn} = {
|
||||
addSSL = true;
|
||||
forceSSL = true;
|
||||
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
||||
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
||||
locations."/" = {
|
||||
|
|
|
@ -113,7 +113,7 @@ in
|
|||
# listen = [ { addr = "0.0.0.0"; port = 443; } ];
|
||||
sslCertificate = "/var/lib/acme/${cfg.domain}/cert.pem";
|
||||
sslCertificateKey = "/var/lib/acme/${cfg.domain}/key.pem";
|
||||
addSSL = true;
|
||||
forceSSL = true;
|
||||
};
|
||||
|
||||
systemd.services.phpfpm-nextcloud.serviceConfig = {
|
||||
|
|
Loading…
Reference in a new issue