From 21e9275e5ac8e1ff22c051c86bdbc69bec2945ac Mon Sep 17 00:00:00 2001
From: osbm <osbm@osbm.dev>
Date: Wed, 29 Oct 2025 00:23:33 +0300
Subject: [PATCH] ssl

---
 modules/nixos/services/forgejo.nix | 1 +
 modules/nixos/services/nginx.nix   | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/modules/nixos/services/forgejo.nix b/modules/nixos/services/forgejo.nix
index b6b4e88..bb77ca1 100644
--- a/modules/nixos/services/forgejo.nix
+++ b/modules/nixos/services/forgejo.nix
@@ -54,6 +54,7 @@
     (lib.mkIf (config.osbmModules.services.nginx.enable && config.osbmModules.services.forgejo.enable) {
       services.nginx.virtualHosts."${config.services.forgejo.settings.server.DOMAIN}" = {
         forceSSL = true;
+        enableACME = true;
         locations."/".proxyPass = "http://localhost:3000";
         locations."/".proxyWebsockets = true;
       };
diff --git a/modules/nixos/services/nginx.nix b/modules/nixos/services/nginx.nix
index c4a835a..fcac993 100644
--- a/modules/nixos/services/nginx.nix
+++ b/modules/nixos/services/nginx.nix
@@ -9,6 +9,11 @@
       services.nginx = {
         enable = true;
       };
+
+      security.acme = {
+        acceptTerms = true;
+        defaults.email = "osbm@osbm.dev";
+      };
     })
   ];
 }