From 43c2395357658787798de5644a1c4d6504d31ffc Mon Sep 17 00:00:00 2001
From: Filippo Berto <filippo.berto@cern.ch>
Date: Fri, 6 Feb 2026 14:43:35 +0100
Subject: [PATCH] baldur: enable kTLS and redirect for www.bertof.net

---
 instances/baldur/configuration.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/instances/baldur/configuration.nix b/instances/baldur/configuration.nix
index 720d648..483bc9f 100644
--- a/instances/baldur/configuration.nix
+++ b/instances/baldur/configuration.nix
@@ -104,9 +104,14 @@
           ssl = {
             enableACME = true;
             forceSSL = true;
+            kTLS = true;
           };
         in
         {
+          "www.bertof.net" = ssl // {
+            default = true;
+            locations."/".extraConfig = "rewrite ^/(berto/)?(.*)$ https://bertof.gitlab.io/$2 redirect ;";
+          };
           "me.bertof.net" = ssl // {
             locations."/".extraConfig = "rewrite ^/(berto/)?(.*)$ https://bertof.gitlab.io/$2 redirect ;";
           };