From 1d6b4c45bf703326d5bf083b66759cae5d1c7260 Mon Sep 17 00:00:00 2001
From: Infinidoge <infinidoge@inx.moe>
Date: Tue, 30 Jan 2024 18:18:28 -0500
Subject: [PATCH] Infini-OPTIPLEX: enable nginx

---
 hosts/Infini-OPTIPLEX/default.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/hosts/Infini-OPTIPLEX/default.nix b/hosts/Infini-OPTIPLEX/default.nix
index cebac03..e25d12b 100644
--- a/hosts/Infini-OPTIPLEX/default.nix
+++ b/hosts/Infini-OPTIPLEX/default.nix
@@ -34,6 +34,10 @@
       address = "128.210.6.97";
       interface = "enp0s31f6";
     };
+    firewall = {
+      allowedUDPPorts = [ 80 443 ];
+      allowedTCPPorts = [ 80 443 ];
+    };
   };
 
   persist = {
@@ -60,4 +64,15 @@
       "/root/.ssh/immutable_files.txt"
     ];
   };
+
+  services.nginx = {
+    enable = true;
+
+    statusPage = true;
+
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    recommendedProxySettings = true;
+  };
 }