nginx: force SSL everywhere

This commit is contained in:
Khaïs COLIN 2025-07-19 22:05:59 +02:00
parent 834a175e6c
commit 1228dbfa4f
Signed by: logistic-bot
SSH key fingerprint: SHA256:3zI3/tx0ZpCLHCLPmEaGR4oeYCPMCzQxXhXutBmtOAU

View file

@ -363,22 +363,22 @@
"jellyfin.005540.xyz" = { "jellyfin.005540.xyz" = {
locations."/".proxyPass = "http://localhost:8096"; locations."/".proxyPass = "http://localhost:8096";
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"forgejo.005540.xyz" = { "forgejo.005540.xyz" = {
locations."/".proxyPass = "http://localhost:3000"; locations."/".proxyPass = "http://localhost:3000";
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"miniflux.005540.xyz" = { "miniflux.005540.xyz" = {
locations."/".proxyPass = "http://localhost:8700"; locations."/".proxyPass = "http://localhost:8700";
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"paperless.005540.xyz" = { "paperless.005540.xyz" = {
locations."/".proxyPass = "http://localhost:28981"; locations."/".proxyPass = "http://localhost:28981";
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"immich.005540.xyz" = { "immich.005540.xyz" = {
locations."/".proxyPass = "http://localhost:2283"; locations."/".proxyPass = "http://localhost:2283";
@ -390,19 +390,19 @@
send_timeout 600s; send_timeout 600s;
''; '';
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"audiobookshelf.005540.xyz" = { "audiobookshelf.005540.xyz" = {
locations."/".proxyPass = "http://localhost:8000"; locations."/".proxyPass = "http://localhost:8000";
locations."/".proxyWebsockets = true; locations."/".proxyWebsockets = true;
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"victorialogs.005540.xyz" = { "victorialogs.005540.xyz" = {
locations."/".proxyPass = "http://localhost:9428"; locations."/".proxyPass = "http://localhost:9428";
locations."/".basicAuthFile = "/etc/nixos/secrets/victorialogs/basicauth"; locations."/".basicAuthFile = "/etc/nixos/secrets/victorialogs/basicauth";
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; };
"nextcloud.005540.xyz" = { "nextcloud.005540.xyz" = {
enableACME = true; enableACME = true;