diff options
| -rw-r--r-- | hosts/arrakis/services.nix | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/hosts/arrakis/services.nix b/hosts/arrakis/services.nix index e0c1111..daac1a8 100644 --- a/hosts/arrakis/services.nix +++ b/hosts/arrakis/services.nix @@ -133,6 +133,20 @@ ::1 1; 192.168.1.0/24 1; } + + set $enable_ssl 0; + + if ($geo != 1) { + set $enable_ssl 1 + } + + if ($scheme != https) { + set $enable_ssl 1 + } + + if ($enable_ssl) { + return 301 https://$host$request_uri; + } ''; enable = true; |