fediversity/default.nix

@@ -100,4 +100,14 @@ in {
       };
     };
   };
+
+  config = {
+    ## FIXME: This should clearly go somewhere else; and we should have a
+    ## `staging` vs. `production` setting somewhere.
+    security.acme = {
+      acceptTerms = true;
+      defaults.email = "nicolas.jeannerod+fediversity@moduscreate.com";
+      defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
+    };
+  };
 }

fediversity/pixelfed.nix

@@ -50,6 +50,8 @@ lib.mkIf (config.fediversity.enable && config.fediversity.pixelfed.enable) {
     ##
     ## TODO: If that indeed makes sense, upstream.
     nginx = {
+      forceSSL = true;
+      enableACME = true;
       # locations."/public/".proxyPass = "${config.fediversity.internal.garage.web.urlFor "pixelfed"}/public/";
     };
   };