From 2fcee37b13673013dccb9ab02aa2a72caaca2583 Mon Sep 17 00:00:00 2001
From: Skyler Grey <sky@a.starrysky.fyi>
Date: Wed, 15 Oct 2025 23:21:19 +0000
Subject: [PATCH] feat(pm/umber): clean up silverbullet SSL
Change-Id: ukuomtnrpmmqlmvmxktwtuwqmmpsxvyw

There's no need for us to be listening for silverbullet on our
clicks.domains host, nor should we be listening for plain HTTP anymore
---
 packetmix/systems/umber/silverbullet.nix | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/packetmix/systems/umber/silverbullet.nix b/packetmix/systems/umber/silverbullet.nix
index 6c4849f2..72edf7be 100644
--- a/packetmix/systems/umber/silverbullet.nix
+++ b/packetmix/systems/umber/silverbullet.nix
@@ -28,12 +28,10 @@
   services.nginx.virtualHosts."silverbullet.starrysky.fyi" = {
     listenAddresses = [ "localhost.tailscale" ];
 
-    addSSL = true;
+    onlySSL = true;
     enableACME = true;
     acmeRoot = null;
 
-    serverAliases = [ "umber.clicks.domains" ];
-
     locations."/" = {
       proxyPass = "http://$silverbullet_upstream_minion_only";
       recommendedProxySettings = true;
-- 
2.43.0