Fix http acme challange for status.nekover.se

config/hosts/valkyrie/configuration.nix

@@ -80,11 +80,6 @@
           proto = "tcp";
           sourcePort = 25;
         }
-        {
-          destination = "172.18.50.2:80";
-          proto = "tcp";
-          sourcePort = 80;
-        }
         {
           destination = "172.18.50.2:465";
           proto = "tcp";

config/hosts/valkyrie/nginx.nix

@@ -2,23 +2,35 @@
 {
   services.nginx = {
     enable = true;
-    virtualHosts."status.nekover.se" = {
+    virtualHosts = {
-      forceSSL = true;
+      "mail-1.grzb.de" = {
-      enableACME = true;
+        listen = [{
-      listen = [
-        {
           addr = "0.0.0.0";
           port = 80;
-        }
+        }];
-        {
+        locations."/" = {
-          addr = "0.0.0.0";
+          # proxy port 80 to mail server nginx for acme http challange
-          port = 443;
+          proxyPass = "http://172.18.50.2:80";
-          ssl = true;
+        };
-        }
+      };
-      ];
+      "status.nekover.se" = {
-      locations."/" = {
+        forceSSL = true;
-        proxyPass = "http://localhost:3001";
+        enableACME = true;
-        proxyWebsockets = true;
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 80;
+          }
+          {
+            addr = "0.0.0.0";
+            port = 443;
+            ssl = true;
+          }
+        ];
+        locations."/" = {
+          proxyPass = "http://localhost:3001";
+          proxyWebsockets = true;
+        };
       };
     };
   };