handle TLS in server with ACME

1 files changed, 8 insertions, 1 deletions

diff --git a/default.nix b/default.nix
index 31f6b91..778f790 100644
--- a/default.nix
+++ b/default.nix
@@ -14,9 +14,13 @@ let
     runCommandLocal;
 
   version = "unstable";
-  mkDocker = type: { server, website }:
+  mkDocker = type: { server, website, architecture ? pkgs.go.GOARCH }:
     pkgs.dockerTools.${type} {
       name = "registry.fly.io/alanpearce-eu";
+      contents = with pkgs; [
+        cacert
+      ];
+      inherit architecture;
       config = {
         Cmd = [ "${server}/bin/server" ];
         Env = [
@@ -28,6 +32,7 @@ let
         WorkingDir = website;
         ExposedPorts = {
           "80/tcp" = { };
+          "443/tcp" = { };
         };
       };
     };
@@ -130,9 +135,11 @@ rec {
   docker-image-amd64-linux = mkDockerImage {
     inherit website;
     server = server-amd64-linux;
+    architecture = "amd64";
   };
   docker-stream-amd64-linux = mkDockerStream {
     inherit website;
     server = server-amd64-linux;
+    architecture = "amd64";
   };
 }