global/security: split into force ssl and add ssl

This commit is contained in:
Infinidoge 2024-04-13 00:56:08 -04:00
parent 9768fd3092
commit c3da8351ec
Signed by: Infinidoge
SSH key fingerprint: SHA256:VEv3zmkBzcYYle6/37h+BbOyNDbGy/o8SHh7fcs9RbQ

View file

@ -54,6 +54,17 @@ with lib;
};
common = {
nginx.ssl = { sslCertificate = config.secrets."inx.moe.pem"; sslCertificateKey = config.secrets."inx.moe.key"; forceSSL = true; };
nginx = rec {
ssl-cert = {
sslCertificate = config.secrets."inx.moe.pem";
sslCertificateKey = config.secrets."inx.moe.key";
};
ssl-optional = ssl-cert // {
addSSL = true;
};
ssl = ssl-cert // {
forceSSL = true;
};
};
};
}