This repository has no description
neoprism: move nginx config to new file
author
lassulus
date
(Dec 12, 2023, 4:39 PM CET)
commit
e36692ac
e36692ac5144a5250c50dc6140143ad0282f6f5d
parent
b8f4e2c5
b8f4e2c595315d2f070f91205809d95b6b977952
+24
-21
+23
2configs/nginx.nix
+23
2configs/nginx.nix
···
1
+
{
2
+
networking.firewall.allowedTCPPorts = [ 80 443 ];
3
+
security.acme.acceptTerms = true;
4
+
security.acme.defaults.email = "acme@lassul.us";
5
+
6
+
services.nginx = {
7
+
enable = true;
8
+
recommendedGzipSettings = true;
9
+
recommendedOptimisation = true;
10
+
recommendedTlsSettings = true;
11
+
12
+
enableReload = true;
13
+
14
+
virtualHosts.default = {
15
+
default = true;
16
+
locations."= /etc/os-release".extraConfig = ''
17
+
default_type text/plain;
18
+
alias /etc/os-release;
19
+
'';
20
+
locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
21
+
};
22
+
};
23
+
}
+1
-21
machines/neoprism/config.nix
+1
-21
machines/neoprism/config.nix
···
8
8
# ../../2configs/matrix.nix
9
9
../../2configs/gsm-wiki.nix
10
10
../../2configs/monitoring/telegraf.nix
11
+
../../nginx.nix
11
12
12
13
# sync-containers
13
14
../../2configs/consul.nix
···
36
37
];
37
38
38
39
krebs.build.host = config.krebs.hosts.neoprism;
39
-
40
-
networking.firewall.allowedTCPPorts = [ 80 443 ];
41
-
security.acme.acceptTerms = true;
42
-
security.acme.defaults.email = "acme@lassul.us";
43
-
services.nginx = {
44
-
enable = true;
45
-
recommendedGzipSettings = true;
46
-
recommendedOptimisation = true;
47
-
recommendedTlsSettings = true;
48
-
49
-
enableReload = true;
50
-
51
-
virtualHosts.default = {
52
-
default = true;
53
-
locations."= /etc/os-release".extraConfig = ''
54
-
default_type text/plain;
55
-
alias /etc/os-release;
56
-
'';
57
-
locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
58
-
};
59
-
};
60
40
}