global/security: split into force ssl and add ssl
This commit is contained in:
parent
9768fd3092
commit
c3da8351ec
1 changed files with 12 additions and 1 deletions
|
@ -54,6 +54,17 @@ with lib;
|
|||
};
|
||||
|
||||
common = {
|
||||
nginx.ssl = { sslCertificate = config.secrets."inx.moe.pem"; sslCertificateKey = config.secrets."inx.moe.key"; forceSSL = true; };
|
||||
nginx = rec {
|
||||
ssl-cert = {
|
||||
sslCertificate = config.secrets."inx.moe.pem";
|
||||
sslCertificateKey = config.secrets."inx.moe.key";
|
||||
};
|
||||
ssl-optional = ssl-cert // {
|
||||
addSSL = true;
|
||||
};
|
||||
ssl = ssl-cert // {
|
||||
forceSSL = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue