global/security: split into force ssl and add ssl
This commit is contained in:
parent
9768fd3092
commit
c3da8351ec
1 changed files with 12 additions and 1 deletions
|
@ -54,6 +54,17 @@ with lib;
|
||||||
};
|
};
|
||||||
|
|
||||||
common = {
|
common = {
|
||||||
nginx.ssl = { sslCertificate = config.secrets."inx.moe.pem"; sslCertificateKey = config.secrets."inx.moe.key"; forceSSL = true; };
|
nginx = rec {
|
||||||
|
ssl-cert = {
|
||||||
|
sslCertificate = config.secrets."inx.moe.pem";
|
||||||
|
sslCertificateKey = config.secrets."inx.moe.key";
|
||||||
|
};
|
||||||
|
ssl-optional = ssl-cert // {
|
||||||
|
addSSL = true;
|
||||||
|
};
|
||||||
|
ssl = ssl-cert // {
|
||||||
|
forceSSL = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue