From 5ef283bf8ed48010789fe7f00940576a04f67245 Mon Sep 17 00:00:00 2001
From: ktkk <dezuttereluka@gmail.com>
Date: Mon, 20 Oct 2025 20:52:07 +0000
Subject: [PATCH] Enable ACME for Grafana

---
 modules/grafana/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/modules/grafana/default.nix b/modules/grafana/default.nix
index de6c330..27671a3 100644
--- a/modules/grafana/default.nix
+++ b/modules/grafana/default.nix
@@ -1,10 +1,17 @@
 { pkgs, config, ... }:
 {
   services.nginx.virtualHosts.${config.services.grafana.settings.server.domain} = {
+    forceSSL = true;
+    enableACME = true;
+
     locations."/" = {
       proxyPass = "http://${toString config.services.grafana.settings.server.http_addr}:${toString config.services.grafana.settings.server.http_port}";
 
       proxyWebsockets = true;
+
+      extraConfig = ''
+        proxy_pass_header Authorization;
+      '';
     };
   };