X-Git-Url: https://git.kernelpanic.cafe/?p=MarigoldOS%2F.git;a=blobdiff_plain;f=profiles%2Fgitweb.nix;h=2dd0d760a84fba5602084f5790dd1a5397bd64a1;hp=da20c960508a9245ce5e2535700d517273cfa5c9;hb=7ba326dc6f74a12b989a9ecad4b1f69f0c965f46;hpb=508b2365b7dc8759454a9800db2c9c297466cf43

diff --git a/profiles/gitweb.nix b/profiles/gitweb.nix
index da20c96..2dd0d76 100644
--- a/profiles/gitweb.nix
+++ b/profiles/gitweb.nix
@@ -3,15 +3,22 @@ let
   fqdn = "git.${config.networking.fqdn}";
 in
 {
-  services.nginx.gitweb = {
-    enable = true;
-    location = "";
-    virtualHost = "${fqdn}";
+  services.nginx = {
+    gitweb = {
+      enable = true;
+      location = "";
+      virtualHost = "${fqdn}";
+    };
+    virtualHosts."${fqdn}" = {
+      enableACME = config.security.acme.acceptTerms;
+      forceSSL = config.security.acme.acceptTerms;
+    };
   };
   # BOILER
   # PLATE
   networking.hosts."127.0.0.1" = [ "${fqdn}" ];
   # TODO Check perms see if they are g2g. idk about recursive +x
+  # Rethink this. Ugly.
   systemd.tmpfiles.rules = [
     "d '${config.services.gitweb.projectroot}' 0775 ${config.services.nginx.user} git"
     "Z '${config.services.gitweb.projectroot}' 0775 ${config.services.nginx.user} git"