]> Git — Sourcephile - sourcephile-nix.git/blob - servers/mermet/nginx/sourcephile.fr/www.nix
nginx: use Let's Encrypt X.509 certificate
[sourcephile-nix.git] / servers / mermet / nginx / sourcephile.fr / www.nix
1 { pkgs, lib, config, ... }:
2 let inherit (config) networking;
3 inherit (config.services) nginx;
4 domain = "sourcephile.fr";
5 in
6 {
7 services.nginx = {
8 virtualHosts."www" = {
9 serverName = "www.${networking.domain}";
10 serverAliases =
11 [ networking.domain ]
12 ++ config.networking.domainAliases
13 ++ map (domainAlias: "www." + domainAlias)
14 config.networking.domainAliases;
15 forceSSL = false;
16 enableSSL = true;
17 useACMEHost = domain;
18 globalRedirect = "git.${networking.domain}";
19 };
20 };
21 }