From 8d4dae8dd946778c20e2fa6c9f9c22d18bc43fc2 Mon Sep 17 00:00:00 2001
From: Philip Peterson <peterson@sent.com>
Date: Thu, 14 May 2026 14:33:31 -0800
Subject: [PATCH] Fix riverside port mapping, postgres volume path, and enable
 HTTPS
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Map container port 80 (not 8080) to host 3011
- Mount postgres data at /var/lib/postgresql (postgres 18 changed path)
- Set TRUSTED_HOST env var so Drupal accepts the hostname
- Enable ACME/HTTPS for riverside.coldairnetworks.com with HTTP→HTTPS redirect

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 nixos/nginx.nix | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/nixos/nginx.nix b/nixos/nginx.nix
index 1b1f5e9..ce2eb8e 100644
--- a/nixos/nginx.nix
+++ b/nixos/nginx.nix
@@ -138,12 +138,15 @@
         };
       };
       "riverside.coldairnetworks.com" = {
-        enableACME = false;
-        forceSSL = false;
-        addSSL = false;
+        enableACME = true;
+        forceSSL = true;
 
         locations."/" = {
           proxyPass = "http://127.0.0.1:3011/";
+          extraConfig = ''
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Host $host;
+          '';
         };
       };
       "quineglobal.com" = {