add https

modules/acme.nix

@@ -1,7 +1,6 @@
 {
     security.acme = {
         acceptTerms = true;
-        # Replace the email here!
         defaults.email = "7265381+Kropatz@users.noreply.github.com";
     };
 }

modules/invidious.nix

@@ -9,8 +9,6 @@ in
     mode = "444";
   };
 
-  security.acme.certs."yt.local".server = "https://127.0.0.1:8443/acme/acme/directory";
-
   services.invidious = {
     enable = true;
 
@@ -51,6 +49,7 @@ in
     nginx.enable = false;
   };
 
+  security.acme.certs."${fqdn}".server = "https://127.0.0.1:8443/acme/acme/directory";
   services.nginx.virtualHosts."${fqdn}" = {
     forceSSL = useHttps;
     enableACME = useHttps;

modules/kavita.nix

@@ -1,6 +1,9 @@
 { config, pkgs, lib, inputs, ... }:
+let
+  fqdn = "kavita.local";
+  useHttps = config.services.step-ca.enable;
+in
 {
-
   networking.firewall.allowedTCPPorts = [ 5000 ];
   age.secrets.kavita = {
     file = ../secrets/kavita.age;
@@ -28,4 +31,16 @@
         EOF
       '';
   };
+
+  security.acme.certs."${fqdn}".server = "https://127.0.0.1:8443/acme/acme/directory";
+  services.nginx.virtualHosts."${fqdn}" = {
+    forceSSL = useHttps;
+    enableACME = useHttps;
+    locations."/".proxyPass = "http://127.0.0.1:5000";
+    locations."/".extraConfig = ''
+      add_header Access-Control-Allow-Origin *;
+      add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
+      add_header Access-Control-Allow-Headers "Authorization, Origin, X-Requested-With, Content-Type, Accept";
+    '';
+  };
 }