pleading_face

hosts/vulpecula/configuration.nix

@@ -1,47 +1,3 @@
-# {
-#   pkgs,
-#   lib,
-#   inputs,
-#   ...
-# }: let
-#   sshKeys = import ../../crypto/ssh-keys.nix;
-# in {
-#   imports = [
-#     ./hardware-configuration.nix
-#     ../../common/base.nix
-#   ];
-
-#   networking = {
-#     hostName = "vulpecula";
-
-#     firewall = {
-#       allowedTCPPorts = [
-#         # 2342
-#         # 8080 # ?
-#         # 9000
-#         # 9002
-#       ];
-#     };
-#   };
-
-#   # nix.settings.trusted-users = ["root" "@wheel"]; # TODO
-
-#   users.users.tasia = {
-#     isNormalUser = true;
-#     description = "Tasia";
-#     extraGroups = ["networkmanager" "wheel"];
-#     initialPassword = "correcthorsebatterystaple";
-#     openssh.authorizedKeys.keys = [
-#       sshKeys.tasia.yaseen
-#     ];
-#   };
-
-#   environment.systemPackages = with pkgs; [
-#   ];
-
-#   # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
-#   system.stateVersion = "24.05";
-# }
 { config, lib, ... }: let
   sshKeys = import ../../crypto/ssh-keys.nix;
 in {
@@ -95,11 +51,16 @@ in {
 
   services.nginx.enable = true;
   services.nginx.virtualHosts."vulpecula.zone" = {
-    # addSSL = true;
-    # enableACME = true;
+    addSSL = true;
+    enableACME = true;
     root = "/www";
   };
 
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "tasiaiso@proton.me";
+  };
+
   boot.tmp.cleanOnBoot = true;
   zramSwap.enable = true;
   networking.domain = "";