From aaf49311fc0c71e0c3bdb737e32b5f7ef0158693 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Wed, 16 Aug 2023 13:28:43 +0200
Subject: [PATCH] ssl for the website

---
 modules/nginx.nix   | 5 -----
 modules/website.nix | 2 ++
 2 files changed, 2 insertions(+), 5 deletions(-)

diff --git a/modules/nginx.nix b/modules/nginx.nix
index 26d7380..76a34bc 100644
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -7,11 +7,6 @@
     recommendedOptimisation = true;
     recommendedTlsSettings = true;
 
-    virtualHosts."${config.fsr.domain}" = {
-      enableACME = true;
-      forceSSL = true;
-    };
-
     appendHttpConfig = ''
       map $remote_addr $remote_addr_anon {
                ~(?P<ip>\d+\.\d+\.\d+)\.    $ip.0;
diff --git a/modules/website.nix b/modules/website.nix
index 7b3159a..912eea5 100644
--- a/modules/website.nix
+++ b/modules/website.nix
@@ -32,6 +32,8 @@ in
 
   services.nginx = rec {
     virtualHosts.${www-domain} = {
+      enableACME = true;
+      forceSSL = true;
       root = "/srv/web/ifsrde";
       locations = {
         "= /" = {