machines/dev/forgejo-ci/default.nix

@@ -39,7 +39,7 @@ in
       _class = "nixos";
 
       imports = [
-        # ./forgejo-actions-runner.nix
+        ./forgejo-actions-runner.nix
         ./woodpecker.nix
       ];
 

machines/dev/forgejo-ci/woodpecker.nix

@@ -15,8 +15,6 @@
     woodpecker-agent-docker = { };
   };
 
-  users.users.nginx.extraGroups = [ "acme" ];
-
   age.secrets =
     lib.mapAttrs
       (_: group: {
@@ -177,7 +175,10 @@
       recommendedTlsSettings = true;
       virtualHosts."woodpecker.fediversity.eu" = {
         enableACME = true;
-        # forceSSL = true;
+        forceSSL = true;
+        locations."/.well-known/acme-challenge/" = {
+          root = "/var/lib/acme/woodpecker.fediversity.eu";
+        };
         locations."/" = {
           recommendedProxySettings = true;
           proxyPass = "http://127.0.0.1:8000";
@@ -210,8 +211,6 @@
         22
         80
         443
-        8000
-        9000
       ];
       # needed for podman to be able to talk over dns
       interfaces."podman+" = {