Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

global/security: set common nginx settings

Browse source
This commit is contained in:
Infinidoge 2024-02-01 20:09:20 -05:00
parent caba8c11c1
commit 567358aeff
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
3 changed files with 8 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

7
hosts/Infini-OPTIPLEX/default.nix
View file

@ -69,12 +69,5 @@
services.nginx = { services.nginx = {
enable = true; enable = true;
statusPage = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
}; };
} }

7
hosts/Infini-SERVER/default.nix
View file

@ -70,13 +70,6 @@
{ {
enable = true; enable = true;
statusPage = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
virtualHosts = { virtualHosts = {
"*.inx.moe" = ssl // { "*.inx.moe" = ssl // {
listen = lib.flatten listen = lib.flatten

8
modules/global/security.nix
View file

@ -52,6 +52,14 @@ with lib;
]; ];
}; };
services.nginx = {
statusPage = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
};
common = { common = {
nginx.ssl = { sslCertificate = config.secrets."inx.moe.pem"; sslCertificateKey = config.secrets."inx.moe.key"; forceSSL = true; }; nginx.ssl = { sslCertificate = config.secrets."inx.moe.pem"; sslCertificateKey = config.secrets."inx.moe.key"; forceSSL = true; };
}; };