From 04f538164ce11ce977a851b6de2a9d2c5f7a9adb Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Tue, 12 Dec 2023 19:12:20 +0100
Subject: fix ssl cert for social.krebsco.de

---
 krebs/2configs/mastodon.nix | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

(limited to 'krebs/2configs/mastodon.nix')

diff --git a/krebs/2configs/mastodon.nix b/krebs/2configs/mastodon.nix
index ab400955..ebc4207a 100644
--- a/krebs/2configs/mastodon.nix
+++ b/krebs/2configs/mastodon.nix
@@ -19,18 +19,11 @@
     smtp.fromAddress = "derp";
   };
 
-  services.nginx.virtualHosts.${config.services.mastodon.localDomain} = {
-    forceSSL = lib.mkForce false;
-    enableACME = lib.mkForce false;
-    locations."@proxy".extraConfig = ''
-      proxy_redirect off;
-      proxy_pass_header Server;
-      proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
-    '';
-  };
+  security.acme.certs."social.krebsco.de".server = "https://acme-staging-v02.api.letsencrypt.org/directory";
 
   networking.firewall.allowedTCPPorts = [
     80
+    443
   ];
 
   environment.systemPackages = [
-- 
cgit v1.2.3