nginx: Force TLS

os/host/seed/attic.nix

@@ -28,8 +28,8 @@ in {
       };
     };
     nginx.virtualHosts.${domain} = {
-      addSSL = true;
       enableACME = true;
+      forceSSL = true;
       serverName = domain;
       locations."/" = {
         proxyPass = "http://127.0.0.1:${builtins.toString port}";

os/host/seed/bootstrap/default.nix

@@ -36,8 +36,8 @@
     };
   };
   services.nginx.virtualHosts."bootstrap.radicle.xyz" = {
-    addSSL = true;
     enableACME = true;
+    forceSSL = true;
     serverName = "bootstrap.radicle.xyz";
     root = "/var/www/bootstrap.radicle.xyz";
     locations."/".extraConfig = ''

os/host/seed/files.nix

@@ -13,8 +13,8 @@ in {
       add_header 'Access-Control-Allow-Origin' '*';
       autoindex on;
     '';
-    addSSL = true;
     enableACME = true;
+    forceSSL = true;
     serverName = name;
   };
 

os/host/seed/grafana.nix

@@ -19,8 +19,8 @@ in {
     };
 
     nginx.virtualHosts.${domain} = {
-      addSSL = true;
       enableACME = true;
+      forceSSL = true;
       serverName = domain;
       locations."/" = {
         proxyPass = "http://127.0.0.1:${builtins.toString port}";

os/mixin/radicle.nix

@@ -60,8 +60,8 @@
     httpd = {
       enable = true;
       nginx = {
-        addSSL = true;
         enableACME = true;
+	forceSSL = true;
         serverName = config.networking.fqdn;
       };
     };