From a66dfe0b95f91a9afea602941a26d6c943ae0f23 Mon Sep 17 00:00:00 2001
From: Vinzenz Schroeter <vinzenz.f.s@gmail.com>
Date: Sun, 4 Jan 2026 20:51:42 +0100
Subject: [PATCH] headscale/blog: fix url, force ssl, proxy websockets

---
 nixosConfigurations/hetzner-vpn2/blog.nix      | 2 +-
 nixosConfigurations/hetzner-vpn2/headscale.nix | 9 +++++----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/nixosConfigurations/hetzner-vpn2/blog.nix b/nixosConfigurations/hetzner-vpn2/blog.nix
index 4b29cb3..367ef2b 100644
--- a/nixosConfigurations/hetzner-vpn2/blog.nix
+++ b/nixosConfigurations/hetzner-vpn2/blog.nix
@@ -13,8 +13,8 @@ in
   services = {
     nginx.virtualHosts = {
       "zerforschen.plus" = {
-        addSSL = true;
         enableACME = true;
+        forceSSL = true;
         locations = {
           "/_metrics".proxyPass = "http://unix:" + anubis-metrics-socket + ":/metrics";
           "/".proxyPass = "http://unix:" + anubis-domain-socket;
diff --git a/nixosConfigurations/hetzner-vpn2/headscale.nix b/nixosConfigurations/hetzner-vpn2/headscale.nix
index 538c557..43eda08 100644
--- a/nixosConfigurations/hetzner-vpn2/headscale.nix
+++ b/nixosConfigurations/hetzner-vpn2/headscale.nix
@@ -8,7 +8,7 @@ in
       address = "localhost";
       port = headscale-port;
       settings = {
-        server_url = "https://headscale.zerforschen.plus";
+        server_url = "https://uplink.darkest.space/";
         dns = {
           override_local_dns = false;
           base_domain = "high-gravity.space";
@@ -16,10 +16,11 @@ in
       };
     };
     nginx.virtualHosts."uplink.darkest.space" = {
-      addSSL = true;
       enableACME = true;
-      locations = {
-        "/".proxyPass = "http://localhost:${builtins.toString headscale-port}";
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${builtins.toString headscale-port}";
+        proxyWebsockets = true;
       };
     };
   };