From 3b4b7a56036ae9e05be6533da7c3741423335610 Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Tue, 3 Feb 2026 21:18:33 +0100
Subject: feat(sops): add certs to sops-nix

---
 modules/nixos/server/nextcloud/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'modules/nixos/server/nextcloud/default.nix')

diff --git a/modules/nixos/server/nextcloud/default.nix b/modules/nixos/server/nextcloud/default.nix
index 3fba5c8..695850d 100644
--- a/modules/nixos/server/nextcloud/default.nix
+++ b/modules/nixos/server/nextcloud/default.nix
@@ -56,11 +56,11 @@ in
       phpOptions."opcache.interned_strings_buffer" = "64";
     };
 
-    services.nginx.virtualHosts = mkIf ((config.nx.server.nginx or { }).enable or false) {
+    services.nginx.virtualHosts = {
       "cloud.schererleander.de" = {
         forceSSL = true;
-        sslCertificate = config.nx.server.nginx.sslCertificate;
-        sslCertificateKey = config.nx.server.nginx.sslCertificateKey;
+        sslCertificate = config.sops.secrets."cert_fullchain".path;
+        sslCertificateKey = config.sops.secrets."cert_private".path;
       };
     };
 
-- 
cgit v1.3.1