From 0fed2374d8d1eb3bca9117f2191a36de1581066b Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <jakub@wilkuu.xyz>
Date: Sun, 7 Jun 2026 20:14:25 +0200
Subject: nginx: Force-Redirect to HTTPS on public sites

---
 services/bulwark.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'services/bulwark.nix')

diff --git a/services/bulwark.nix b/services/bulwark.nix
index 00198cd..728139c 100644
--- a/services/bulwark.nix
+++ b/services/bulwark.nix
@@ -126,7 +126,7 @@ in
   };
   config.services.nginx.virtualHosts = lib.mkIf cfg.enable (
     lib.genAttrs cfg.domains (_vhost: {
-      addSSL = cfg.doACME;
+      forceSSL = cfg.doACME;
       enableACME = cfg.doACME;
       locations."/" = {
         proxyPass = "http://127.0.0.1:3081";
-- 
cgit v1.3.1