From 45d9c2bf7d59b7b8caa589b723144186639a7c2b Mon Sep 17 00:00:00 2001
From: s-prechtl <stefan@tague.at>
Date: Mon, 14 Jul 2025 18:54:16 +0200
Subject: [PATCH] feat: everything perfect now trust me bro

---
 hosts/hitsugibune/matrix.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/hosts/hitsugibune/matrix.nix b/hosts/hitsugibune/matrix.nix
index 81162ab..c9a4c37 100644
--- a/hosts/hitsugibune/matrix.nix
+++ b/hosts/hitsugibune/matrix.nix
@@ -42,10 +42,12 @@ in {
   };
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 
+  # Make certificate readable
+  users.users.nginx.extraGroups = [ "turnserver" ];
   services.nginx.virtualHosts.${turn.realm} = {
   addSSL = true;
   enableACME = false; # we’ll do ACME ourselves
-  forceSSL = false;
+  forceSSL = true;
   sslCertificate = "${config.security.acme.certs.${turn.realm}.directory}/full.pem";
   sslCertificateKey = "${config.security.acme.certs.${turn.realm}.directory}/key.pem";
   locations."/.well-known/acme-challenge/" = {