From c42da7c0a633b2f21f57791d60e4e673e5ebf794 Mon Sep 17 00:00:00 2001
From: goeranh <goeranh@goeranh.de>
Date: Wed, 25 Feb 2026 21:51:20 +0100
Subject: [PATCH] default https redirect

---
 hosts/proxy/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/proxy/default.nix b/hosts/proxy/default.nix
index 9032a43..99832e0 100644
--- a/hosts/proxy/default.nix
+++ b/hosts/proxy/default.nix
@@ -139,13 +139,14 @@
               prev: name: value:
               prev + "acl is_${name} hdr(host) -i ${value.domain}\n"
             ) "" forwards}
+            acl is_acme path_beg /.well-known/acme-challenge/
 
             ${lib.foldlAttrs (
               prev: name: value:
               prev + "use_backend ${name}_80 if is_${name}\n"
             ) "" forwards}
 
-            default_backend plone_80
+            http-request redirect scheme https code 301 if !is_acme
 
 
           frontend ssh_jump_alt