Enable https on new cache

tiiuae · Nov 20, 2023 · 4f511e7 · 4f511e7
1 parent ac1b7e1
commit 4f511e7
Showing 1 changed file with 7 additions and 9 deletions.
diff --git a/hosts/binarycache/default.nix b/hosts/binarycache/default.nix
@@ -50,18 +50,16 @@
     nameservers = ["1.1.1.1" "8.8.8.8"];
   };
 
-  # acme gets https certificates when we have dns
-  # security.acme = {
-  #   acceptTerms = true;
-  #   defaults.email = "[email protected]";
-  # };
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "[email protected]";
+  };
 
   services.nginx = {
     virtualHosts = {
-      # "cache.vedenemo.dev" = {
-      "_" = {
-        # enableACME = true;
-        # forceSSL = true;
+      "cache.vedenemo.dev" = {
+        enableACME = true;
+        forceSSL = true;
         default = true;
         locations."/" = {
           proxyPass = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";