flake

commit 017c8b6bfc13a7a539df8b73599dd2f4679be86a
parent 2f91b6b3711889ab9ebdbb76625b733197f97fda
Author: Francesco Saccone <francesco@francescosaccone.com>
Date:   Thu, 27 Mar 2025 17:23:26 +0100

feat: enable tls in web server

Signed-off-by: Francesco Saccone <francesco@francescosaccone.com>

Diffstat:
M
hosts/git-server/default.nix
 | 
11
+++++++++++

1 file changed, 11 insertions(+), 0 deletions(-)
diff --git a/hosts/git-server/default.nix b/hosts/git-server/default.nix
@@ -26,6 +26,17 @@ in
         email = "admin@${rootDomain}";
         domain = gitDomain;
       };
+      tls = {
+        enable = true;
+        pemFiles =
+          let
+            inherit (config.modules.darkhttpd.acme) directory;
+          in
+          [
+            "${directory}/${gitDomain}/fullchain.pem"
+            "${directory}/${gitDomain}/privkey.pem"
+          ];
+      };
     };
     openssh.listen = {
       enable = true;