ACME and SSL stuff

configuration.nix

@@ -29,6 +29,12 @@
     "nixpkgs=${pkgs.path}"
   ];
 
+  # ACME
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "sky.hearn@pm.me";
+  };
+
   # wireguard server setup
   # enable NAT
   networking.nat.enable = true;

services/gitea.nix

@@ -1,8 +1,8 @@
 { config, ... }:
 {
-  services.nginx.virtualHosts."git.my-domain.tld" = {
-    enableACME = false;
-    forceSSL = false;
+  services.nginx.virtualHosts."git.skymath.duckdns.org" = {
+    enableACME = true;
+    forceSSL = true;
     locations."/" = {
       proxyPass = "http://localhost:3001/";
     };