nginx: streamline all forceSSL and enableACME directives in one file

modules/web/ese.nix

@@ -42,8 +42,6 @@ in
 
   services.nginx = {
     virtualHosts."${cms-domain}" = {
-      enableACME = true;
-      forceSSL = true;
       locations."/" = {
         extraConfig = ''
           if ($request_method = 'OPTIONS') {
@@ -64,8 +62,6 @@ in
       };
     };
     virtualHosts."${domain}" = {
-      enableACME = true;
-      forceSSL = true;
       locations."= /" = {
         return = "301 /2023/";
       };

modules/web/fsrewsp.nix

@@ -37,8 +37,6 @@ in
   services.nginx.enable = true;
   services.nginx = {
     virtualHosts."${domain}" = {
-      addSSL = true;
-      enableACME = true;
       root = "/srv/web/fsrewsp";
       extraConfig = ''
         index index.php index.html;

modules/web/ftp.nix

@@ -5,8 +5,6 @@ in
 {
   services.nginx.additionalModules = [ pkgs.nginxModules.fancyindex ];
   services.nginx.virtualHosts."${domain}" = {
-    enableACME = true;
-    forceSSL = true;
     root = "/srv/ftp";
     extraConfig = ''
       fancyindex on;

modules/web/ifsrde.nix

@@ -32,14 +32,9 @@ in
   services.nginx = {
 
     virtualHosts."www.${config.networking.domain}" = {
-      enableACME = true;
-      forceSSL = true;
       locations."/".return = "301 $scheme://ifsr.de$request_uri";
-
     };
     virtualHosts."${config.networking.domain}" = {
-      enableACME = true;
-      forceSSL = true;
       root = "/srv/web/ifsrde";
       extraConfig = ''
         index index.html index.php;

modules/web/infoscreen.nix

@@ -6,8 +6,6 @@ in
   services.nginx = {
     enable = true;
     virtualHosts."${domain}" = {
-      addSSL = true;
-      enableACME = true;
       root = "/srv/web/infoscreen/dist";
     };
   };

modules/web/kpp.nix

@@ -7,9 +7,4 @@ in
     enable = true;
     hostName = domain;
   };
-  services.nginx.virtualHosts."${domain}" = {
-    enableACME = true;
-    forceSSL = true;
-  };
-
 }

modules/web/manual.nix

@@ -7,10 +7,4 @@ in
     enable = true;
     hostName = domain;
   };
-  services.nginx = {
-    virtualHosts."${domain}" = {
-      addSSL = true;
-      enableACME = true;
-    };
-  };
 }

modules/web/nightline.nix

@@ -34,8 +34,6 @@ in
 
   services.nginx = {
     virtualHosts."${domain}" = {
-      addSSL = true;
-      enableACME = true;
       root = "/srv/web/nightline";
       extraConfig = ''
         index index.php index.html;

modules/web/sharepic.nix

@@ -33,8 +33,6 @@ in
     enable = true;
 
     virtualHosts."${domain}" = {
-      addSSL = true;
-      enableACME = true;
       root = "/srv/web/sharepic";
       extraConfig = ''
         index index.php index.html;

modules/web/userdir.nix

@@ -61,9 +61,6 @@ in
   };
 
   services.nginx.virtualHosts.${domain} = {
-    enableACME = true;
-    forceSSL = true;
-
     locations."/" = {
       proxyPass = "http://localhost:${toString port}";
       extraConfig = ''