From 7fe1c93902bc7ad93fe9c8d325822cea7a1955eb Mon Sep 17 00:00:00 2001
From: Leonardo Santiago <leonardo.ribeiro.santiago@gmail.com>
Date: Tue, 17 Sep 2024 00:04:25 -0300
Subject: configure SSL, change emacs build flags

---
 modules/blog.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'modules/blog.nix')

diff --git a/modules/blog.nix b/modules/blog.nix
index 9234f4e..6e7021a 100644
--- a/modules/blog.nix
+++ b/modules/blog.nix
@@ -19,11 +19,19 @@ in {
     };
   };
   config = mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = [ 80 ];
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
     # TODO: enable SSL
     services.nginx = {
       enable = true;
-      virtualHosts.${cfg.url}.root = blog;
+      virtualHosts.${cfg.url} = {
+        addSSL = true;
+        enableACME = true;
+        root = blog;
+      };
+    };
+    security.acme = {
+      acceptTerms = true;
+      certs."santi.net.br".email = "leonardo.ribeiro.santiago@gmail.com";
     };
   };
 }
-- 
cgit v1.2.3