From a889dbc0f87ae8e53b07ddcb4c6cc10c83ee820c Mon Sep 17 00:00:00 2001
From: C4 Patino <c4patino@gmail.com>
Date: Sun, 31 May 2026 12:34:09 -0500
Subject: [PATCH] refactor: modify httpd to expose public endpoints on being
 set public gateway

---
 modules/nixos/bundles/common/networking.nix         | 2 ++
 modules/nixos/services/networking/httpd/default.nix | 4 ++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/modules/nixos/bundles/common/networking.nix b/modules/nixos/bundles/common/networking.nix
index 53e834e..d8050f5 100644
--- a/modules/nixos/bundles/common/networking.nix
+++ b/modules/nixos/bundles/common/networking.nix
@@ -35,6 +35,8 @@ in {
         };
       };
 
+      gateways = ["shiori"];
+
       network-services = {
         arisu = {
           jellyfin = {
diff --git a/modules/nixos/services/networking/httpd/default.nix b/modules/nixos/services/networking/httpd/default.nix
index d4d0aaa..8c67ae9 100644
--- a/modules/nixos/services/networking/httpd/default.nix
+++ b/modules/nixos/services/networking/httpd/default.nix
@@ -211,13 +211,13 @@ in {
             svc)
           |> listToAttrs)
 
-        (mkIf networkingCfg.cloudflared.enable (
+        (mkIf (builtins.elem hostName networkingCfg.gateways) (
           networkServicesFlat
           |> filterAttrs (_: svc: svc.public)
           |> mapAttrsToList (name: svc:
             (mkVirtualHost {
               domain = "*.cpatino.com";
-              useSSL = false;
+              useSSL = true;
               injectHoneypot = true;
             })
             svc.host