This repository has no description
674 B
29 lines
1{
2 networking.firewall.allowedTCPPorts = [
3 80
4 443
5 ];
6 security.acme.acceptTerms = true;
7 security.acme.defaults.email = "acme@lassul.us";
8
9 services.nginx = {
10 enable = true;
11 recommendedGzipSettings = true;
12 recommendedOptimisation = true;
13 recommendedTlsSettings = true;
14
15 enableReload = true;
16
17 virtualHosts.default = {
18 default = true;
19 locations."/".extraConfig = ''
20 return 404;
21 '';
22 locations."= /etc/os-release".extraConfig = ''
23 default_type text/plain;
24 alias /etc/os-release;
25 '';
26 locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
27 };
28 };
29}