From 56f2393796973b78a0196b0046fd5be50ea066c6 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Wed, 17 Jan 2024 15:41:34 -0800
Subject: [PATCH] Let mastodon configure nginx, but override forceSSL

---
 mastodon-container.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/mastodon-container.nix b/mastodon-container.nix
index 67c01e9..224afe3 100644
--- a/mastodon-container.nix
+++ b/mastodon-container.nix
@@ -114,6 +114,12 @@ in {
                     automaticMigrations = true;
                     streamingProcesses = cfg.streaming-processes;
                   };
+                  nginx = {
+                    virtualHosts."${cfg.hostname}" = {
+                      forceSSL = false;
+                      enableACME = false;
+                    };
+                  };
                 };
               };
             };
@@ -126,6 +132,8 @@ in {
       enable = true;
       recommendedProxySettings = true;
       virtualHosts."${cfg.hostname}" = {
+        enableACME = true;
+        forceSSL = true;
         locations."/" = {
           proxyPass = "http://localhost:${toString cfg.port}";
           proxyWebsockets = true;