diff --git a/hosts/containers/prometheus/configuration.nix b/hosts/containers/prometheus/configuration.nix index 13a0e81c..1a8eb98d 100644 --- a/hosts/containers/prometheus/configuration.nix +++ b/hosts/containers/prometheus/configuration.nix @@ -88,22 +88,18 @@ services.nginx = { enable = true; - + virtualHosts."prometheus.serv.zentralwerk.org" = { - # serverAliases = [ "registry.serv.zentralwerk.org" ]; + # serverAliases = [ "registry.serv.zentralwerk.org" ]; enableACME = true; - enableSSL = true; - # forceSSL = true; + onlySSL = true; locations.".well-known/acme-challenge/" = { - root = "/var/lib/acme/acme-challenge/.well-known/acme-challenge/"; - }; - locations."/" = { - proxyPass = "http://localhost:9090"; + root = "/var/lib/acme/acme-challenge/.well-known/acme-challenge/"; }; + locations."/" = { proxyPass = "http://localhost:9090"; }; }; }; - system.stateVersion = "19.03"; # Did you read the comment? } diff --git a/hosts/containers/registry/configuration.nix b/hosts/containers/registry/configuration.nix index ad736a24..650a4347 100644 --- a/hosts/containers/registry/configuration.nix +++ b/hosts/containers/registry/configuration.nix @@ -63,14 +63,11 @@ services.nginx.virtualHosts."registry.hq.c3d2.de" = { # serverAliases = [ "registry.serv.zentralwerk.org" ]; enableACME = true; - enableSSL = true; - # forceSSL = true; + onlySSL = true; locations.".well-known/acme-challenge/" = { - root = "/var/lib/acme/acme-challenge/.well-known/acme-challenge/"; - }; - locations."/" = { - proxyPass = "http://localhost:5000"; + root = "/var/lib/acme/acme-challenge/.well-known/acme-challenge/"; }; + locations."/" = { proxyPass = "http://localhost:5000"; }; extraConfig = '' client_max_body_size 4096M; gzip off;