From e620a56ab47726f934fe20efbabc8c0ac94660b2 Mon Sep 17 00:00:00 2001
From: Kiara Grouwstra <kiara@procolix.eu>
Date: Wed, 6 Aug 2025 10:21:45 +0200
Subject: [PATCH] poke forceSSL hole to fix ACME issue `Timeout during connect
 (likely firewall problem)`

---
 machines/dev/forgejo-ci/woodpecker.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/machines/dev/forgejo-ci/woodpecker.nix b/machines/dev/forgejo-ci/woodpecker.nix
index 66db1c81..2f7e7982 100644
--- a/machines/dev/forgejo-ci/woodpecker.nix
+++ b/machines/dev/forgejo-ci/woodpecker.nix
@@ -176,6 +176,9 @@
       virtualHosts."woodpecker.fediversity.eu" = {
         enableACME = true;
         forceSSL = true;
+        locations."/.well-known/acme-challenge/" = {
+          root = "/var/lib/acme/woodpecker.fediversity.eu";
+        };
         locations."/" = {
           recommendedProxySettings = true;
           proxyPass = "http://127.0.0.1:8000";