From 84ada43b1f5af0c9fbded94c82df117301f2dee2 Mon Sep 17 00:00:00 2001
From: sid <sid@sid.ovh>
Date: Sun, 19 Apr 2026 03:12:44 +0200
Subject: [PATCH] use acme host sid-internal for vaultwarden

---
 hosts/sid/services/nginx.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/hosts/sid/services/nginx.nix b/hosts/sid/services/nginx.nix
index afbc5e0..a1ec0ce 100644
--- a/hosts/sid/services/nginx.nix
+++ b/hosts/sid/services/nginx.nix
@@ -55,10 +55,13 @@ in
       address = constants.hosts.rx4.ip;
       port = constants.services.rsshub-oci.port;
     };
-    virtualHosts."${constants.services.vaultwarden.fqdn}" = mkVirtualHost {
-      inherit ssl;
-      address = constants.hosts.rx4.ip;
-      port = constants.services.vaultwarden.port;
+    virtualHosts."${constants.services.vaultwarden.fqdn}" = {
+      enableACME = ssl;
+      forceSSL = ssl;
+      useACMEHost = "sid-internal";
+      locations."/" = {
+        proxyPass = "http://${constants.hosts.rx4.ip}:${constants.services.vaultwarden.port}";
+      };
     };
     virtualHosts."${constants.services.webdav.fqdn}" = mkVirtualHost {
       inherit ssl;