zaphyra's git: nixfiles

config/nixos/modules/presets/katja: add nginx with ssl on $fqdn

diff --git a/config/nixos/modules/presets/katja/enable.nix b/config/nixos/modules/presets/katja/enable.nix
@@ -79,6 +79,19 @@ in
       };
     };
 
+    services.nginx = {
+      enable = true;
+      virtualHosts."${config.networking.fqdn}" = {
+        useACMEHost = "${config.networking.fqdn}";
+        forceSSL = true;
+        kTLS = true;
+      };
+    };
+
+    networking.firewall.allowedTCPPorts = [
+      80
+      443
+    ];
 
     environment.systemPackages = with pkgs; [
       ghostty.terminfo