summaryrefslogtreecommitdiffstats
path: root/configs/nginx/default.nix
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2023-09-11 18:24:28 +0200
committertv <tv@krebsco.de>2023-09-13 18:07:11 +0200
commit0c4f3acb281be6290c55a6e96bc29fab5b5c7a11 (patch)
treedadaec00477a095273475ac345b2066b4748c399 /configs/nginx/default.nix
parentab1d0479e90f11806d4703ec6fffed3d5f782914 (diff)
stockholm -> hrm
Diffstat (limited to 'configs/nginx/default.nix')
-rw-r--r--configs/nginx/default.nix21
1 files changed, 21 insertions, 0 deletions
diff --git a/configs/nginx/default.nix b/configs/nginx/default.nix
new file mode 100644
index 0000000..e288c52
--- /dev/null
+++ b/configs/nginx/default.nix
@@ -0,0 +1,21 @@
+{ config, ... }: {
+ services.nginx = {
+ enableReload = true;
+
+ recommendedGzipSettings = true;
+ recommendedOptimisation = true;
+ recommendedTlsSettings = true;
+
+ virtualHosts.${builtins.toJSON ""} = {
+ default = true;
+ extraConfig = ''
+ error_page 400 =444 /;
+ return 444;
+ '';
+ rejectSSL = true;
+ };
+ };
+ tv.iptables = {
+ input-retiolum-accept-tcp = [ "http" ];
+ };
+}