mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/rigel/configuration.nix

machines/rigel/configuration.nix

@@ -1,8 +1,18 @@
-{ inputs, ... }:
+{ config, inputs, ... }:
 {
   imports = [
     (inputs.import-tree ./services)
   ];
   system.stateVersion = "25.11";
   networking.fqdn = "rigel.local";
+  networking.firewall.allowedTCPPorts = [
+    22
+    80
+    443
+  ];
+  security.acme.defaults.email = "admin@b4l.co.th";
+  security.acme.acceptTerms = true;
+  services.nginx.virtualHosts."${config.networking.fqdn}" = {
+    enableACME = true;
+  };
 }

machines/rigel/services/pocket-id.nix

@@ -25,6 +25,7 @@ in
     };
   };
 
+  services.nginx.enable = true;
   services.nginx.virtualHosts."${pidDomain}" = {
     useACMEHost = "${config.networking.fqdn}";
     forceSSL = true;