sail: Update libreddit nginx config

system/hosts/sail.nix

@@ -17,6 +17,7 @@ in
     ../nixos/cloudflared.nix
 
     ../nixos/acme-sail.nix
+    ../nixos/nginx.nix
 
     ../nixos/atuin-sync.nix
 
@@ -24,7 +25,7 @@ in
 
     (import ../nixos/freshrss.nix (args // { inherit secret; }))
 
-    ../nixos/libreddit.nix
+    (import ../nixos/libreddit.nix (args // { inherit secret; }))
 
     (import ../nixos/mastodon.nix (args // { inherit secret; }))
 

system/nixos/libreddit.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, secret, ... }:
 
 {
   services.libreddit = {
@@ -9,16 +9,9 @@
   };
 
   services.nginx = {
-    virtualHosts."libreddit.only.internal" = {
+    virtualHosts."${secret.nginx.hostnames.libreddit}" = {
-      listen = [
+      forceSSL = true;
-        {
+      useACMEHost = "daniel.sx";
-          addr = "127.0.0.1";
-          port = 80;
-        }
-      ];
-
-      forceSSL = false;
-      enableACME = false;
       basicAuthFile = config.age.secrets.libreddit-auth.path;
 
       locations."/" = {

system/nixos/nginx.nix

@@ -0,0 +1,9 @@
+{
+  services.nginx = {
+    enable = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    recommendedBrotliSettings = true;
+    recommendedTlsSettings = true;
+  };
+}