From 205b6a9afbc6f921eba356b83a8b35aaae23ff2d Mon Sep 17 00:00:00 2001
From: colin <colin@uninsane.org>
Date: Tue, 8 Nov 2022 13:28:41 +0000
Subject: [PATCH] nginx: forceSSL for git and fedi

---
 machines/servo/services/nginx.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/machines/servo/services/nginx.nix b/machines/servo/services/nginx.nix
index 997da3a83..3a08ef215 100644
--- a/machines/servo/services/nginx.nix
+++ b/machines/servo/services/nginx.nix
@@ -97,7 +97,7 @@ in
 
   # Pleroma server and web interface
   services.nginx.virtualHosts."fed.uninsane.org" = publog {
-    addSSL = true;
+    forceSSL = true;  # pleroma redirects to https anyway
     enableACME = true;
     locations."/" = {
       proxyPass = "http://127.0.0.1:4000";
@@ -199,7 +199,7 @@ in
 
   # hosted git (web view and for `git <cmd>` use
   services.nginx.virtualHosts."git.uninsane.org" = publog {
-    addSSL = true;
+    forceSSL = true;  # gitea complains if served over a different protocol than its config file says
     enableACME = true;
 
     locations."/" = {