add snakeoil certs

Co-authored-by: Jørn Åne <yorinad@pvv.ntnu.no>

base.nix

@@ -93,12 +93,10 @@
     "snakeoil_cert/public" = {
       owner = "nginx";
       group = "nginx";
-      sopsFile = ./secrets/common.yaml;
     };
     "snakeoil_cert/private" = {
       owner = "nginx";
       group = "nginx";
-      sopsFile = ./secrets/common.yaml;
     };
   };
 

hosts/bekkalokk/services/nginx/default.nix

@@ -16,6 +16,12 @@
     recommendedProxySettings = true;
     recommendedOptimisation = true;
     recommendedGzipSettings = true;
+
+    virtualHosts."bekkalokk.pvv.ntnu.no" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/".return = "301 $scheme://git.pvv.ntnu.no$request_uri";
+    };
   };
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];