From cae763e8ddf3e0e648bf2740fc3dfc19923069ea Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Sun, 17 Nov 2024 14:48:08 +0300
Subject: [PATCH] ofborg: enable nginx for certs

---
 services/ofborg/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/services/ofborg/default.nix b/services/ofborg/default.nix
index b8f8341..d80d796 100644
--- a/services/ofborg/default.nix
+++ b/services/ofborg/default.nix
@@ -26,10 +26,12 @@ in {
       webroot = "/var/lib/acme/.challenges";
       group = "rabbitmq";
     };
+
+    services.nginx.enable = true;
     services.nginx.virtualHosts.${amqpHost}.locations."/.well-known/acme-challenge".root =
       "/var/lib/acme/.challenges";
     systemd.services.rabbitmq.requires = ["acme-finished-${amqpHost}.target"];
 
-    networking.firewall.allowedTCPPorts = [ amqpPort ];
+    networking.firewall.allowedTCPPorts = [ 80 443 amqpPort ];
   };
 }