From eea0a072f28afc84e60e8a249efb205402275e94 Mon Sep 17 00:00:00 2001
From: Vinzenz Schroeter <vinzenz.f.s@gmail.com>
Date: Sun, 4 Jan 2026 20:54:55 +0100
Subject: [PATCH] force ssl

---
 nixosConfigurations/hetzner-vpn2/blog.nix      | 2 +-
 nixosConfigurations/hetzner-vpn2/headscale.nix | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/nixosConfigurations/hetzner-vpn2/blog.nix b/nixosConfigurations/hetzner-vpn2/blog.nix
index 4b29cb3..367ef2b 100644
--- a/nixosConfigurations/hetzner-vpn2/blog.nix
+++ b/nixosConfigurations/hetzner-vpn2/blog.nix
@@ -13,8 +13,8 @@ in
   services = {
     nginx.virtualHosts = {
       "zerforschen.plus" = {
-        addSSL = true;
         enableACME = true;
+        forceSSL = true;
         locations = {
           "/_metrics".proxyPass = "http://unix:" + anubis-metrics-socket + ":/metrics";
           "/".proxyPass = "http://unix:" + anubis-domain-socket;
diff --git a/nixosConfigurations/hetzner-vpn2/headscale.nix b/nixosConfigurations/hetzner-vpn2/headscale.nix
index c27e192..6a0cae2 100644
--- a/nixosConfigurations/hetzner-vpn2/headscale.nix
+++ b/nixosConfigurations/hetzner-vpn2/headscale.nix
@@ -16,8 +16,8 @@ in
       };
     };
     nginx.virtualHosts."uplink.darkest.space" = {
-      addSSL = true;
       enableACME = true;
+      forceSSL = true;
       locations = {
         "/".proxyPass = "http://localhost:${builtins.toString headscale-port}";
       };