wiki: Multiple changes

- Enable acme
- Enable certbot with bare settings
- add and force SSL for bebop subdomain
- enable acme for subdomain
- move music to root for now (to make sure it works)

modules/wiki.nix

@@ -108,8 +108,11 @@
       enable = true;
       virtualHosts = {
         "bebop.bhankas.org" = {
+          addSSL = true;
+          forceSSL = true;
+          enableACME = true;
           locations = {
-            "/music" = {
+            "/" = {
               proxyPass = "http://${config.services.navidrome.settings.Address}:${toString config.services.navidrome.settings.Port}";
             };
 
@@ -124,5 +127,21 @@
         };
       };
     };
+
+    certbot = {
+      enable = true;
+      agreeTerms = true;
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = {
+      "bebop.bhankas.org" = {
+        email = "relekarpayas@gmail.com";
+        dnsResolver = "1.1.1.1:53";
+        dsnProvider = "cloudflare";
+      };
+    };
   };
 }