update

hosts/server/modules/exposed/nginx.nix

@@ -0,0 +1,10 @@
+# Nginx Reverse Proxy & ACME certs
+{ config, ... }: {
+  services.nginx.enable = true;
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = config.var.git.email;
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+}