From fa3c877da11abf0af97f20192bee02cbdddb5753 Mon Sep 17 00:00:00 2001
From: Quentin Aristote <quentin@aristote.fr>
Date: Sat, 7 Aug 2021 21:55:26 +0200
Subject: enable https

---
 config/networking.nix    | 11 ++++++++++-
 config/searx/default.nix |  2 ++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/config/networking.nix b/config/networking.nix
index ba49ea9..cb43347 100644
--- a/config/networking.nix
+++ b/config/networking.nix
@@ -19,6 +19,11 @@
     };
   };
 
+  security.acme = {
+    acceptTerms = true;
+    email = "quentin@aristote.fr";
+  };
+
   services.nginx = {
     enable = true;
     virtualHosts = {
@@ -30,7 +35,11 @@
         '';
       };
 
-      "quentin.aristote.fr" = { root = "${pkgs.personal.academic-webpage}"; };
+      "quentin.aristote.fr" = {
+        root = "${pkgs.personal.academic-webpage}";
+        forceSSL = true;
+        enableACME = true;
+      };
     };
   };
 
diff --git a/config/searx/default.nix b/config/searx/default.nix
index d58cb95..2717868 100644
--- a/config/searx/default.nix
+++ b/config/searx/default.nix
@@ -13,6 +13,8 @@ let
 in {
   # Nginx
   services.nginx.virtualHosts."searx.aristote.fr" = {
+    forceSSL = true;
+    enableACME = true;
     locations = {
       "/" = {
         proxyPass = "http://127.0.0.1:${toString ports.filtron.listen}";
-- 
cgit v1.2.3