enable acme

services/gitlab.nix

@@ -6,7 +6,7 @@
         enable = true;
         host = "git.stubbe.rocks";
         https = true;
-	port = 443;
+	      port = 443;
         initialRootEmail = "gitlab@stubbe.rocks";
         initialRootPassword = "gtlb@stbbe.rcks";
         smtp = {
@@ -49,7 +49,7 @@
     '';
 
       extraConfig.gitlab= {
-          default_theme = 2;         
+          default_theme = 2;
           };
     };
 }

services/nginx.nix

@@ -12,10 +12,8 @@ services.nginx = {
         recommendedProxySettings = true;
         recommendedTlsSettings = true;
         virtualHosts."git.stubbe.rocks" = {
-#            enableACME = true;
+            enableACME = true;
             forceSSL = true;
-	    sslCertificate = "/var/lib/acme/git.stubbe.rocks/fullchain.pem";
-	    sslCertificateKey = "/var/lib/acme/git.stubbe.rocks/key.pem";
             locations."/".proxyPass = "http://unix:/run/gitlab/gitlab-workhorse.socket";
         };