From a1b4175e8d8bd062cc57ea844b1ad2d78447fac2 Mon Sep 17 00:00:00 2001
From: s-prechtl <stefan@tague.at>
Date: Sun, 22 Jun 2025 19:22:11 +0200
Subject: [PATCH] feat: force ssl everywhere

---
 hosts/hitsugibune/nextcloud.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/hosts/hitsugibune/nextcloud.nix b/hosts/hitsugibune/nextcloud.nix
index a6df9cf..a63a4e6 100644
--- a/hosts/hitsugibune/nextcloud.nix
+++ b/hosts/hitsugibune/nextcloud.nix
@@ -10,13 +10,13 @@
   services.nextcloud = {
     enable = true;
     hostName = "sprechtl.ddns.net";
-    https = false;
+    https = true;
     configureRedis = true;
     caching.redis = true;
     autoUpdateApps.enable = true;
     package = pkgs.nextcloud31;
     settings = let
-      prot = "http"; # or https
+      prot = "https"; # or https
       host = config.services.nextcloud.hostName;
       dir = "/nextcloud";
     in {
@@ -66,7 +66,7 @@
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-NginX-Proxy true;
-            proxy_set_header X-Forwarded-Proto http;
+            proxy_set_header X-Forwarded-Proto https;
             #rewrite ^/nextcloud(.*)$ $1 break;
             proxy_pass http://127.0.0.1:8080/; # tailing / is important!
             proxy_set_header Host $host;