This repository has no description
597 B
23 lines
1{
2 networking.firewall.allowedTCPPorts = [ 80 443 ];
3 security.acme.acceptTerms = true;
4 security.acme.defaults.email = "acme@lassul.us";
5
6 services.nginx = {
7 enable = true;
8 recommendedGzipSettings = true;
9 recommendedOptimisation = true;
10 recommendedTlsSettings = true;
11
12 enableReload = true;
13
14 virtualHosts.default = {
15 default = true;
16 locations."= /etc/os-release".extraConfig = ''
17 default_type text/plain;
18 alias /etc/os-release;
19 '';
20 locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
21 };
22 };
23}