summaryrefslogtreecommitdiff
path: root/configuration/snorlax/nginx.nix
diff options
context:
space:
mode:
authorJasper Ras <jaspert.ras@gmail.com>2025-02-09 20:55:53 +0100
committerJasper Ras <jaspert.ras@gmail.com>2025-02-09 20:55:53 +0100
commita911f15b769ffd0b53471a74e210f00b29b34d28 (patch)
treed8ae6cc700c05e4c646e6a960900d9780a854e8c /configuration/snorlax/nginx.nix
parent6521db258a8ce08dbb6f741c4bd25df4221eb2c9 (diff)
mod + nginx
Diffstat (limited to 'configuration/snorlax/nginx.nix')
-rw-r--r--configuration/snorlax/nginx.nix21
1 files changed, 21 insertions, 0 deletions
diff --git a/configuration/snorlax/nginx.nix b/configuration/snorlax/nginx.nix
new file mode 100644
index 0000000..cc38496
--- /dev/null
+++ b/configuration/snorlax/nginx.nix
@@ -0,0 +1,21 @@
+{ ... }:
+{
+ networking.firewall.allowedTCPPorts = [ 443 ];
+
+ services.nginx = {
+ enable = true;
+ recommendedTlsSettings = true;
+
+ virtualHosts = {
+ "jras.nl" = {
+ onlySSL = true;
+ kTLS = true;
+ enableACME = true;
+ root = "/srv/www/jras.nl";
+ };
+ };
+ };
+
+ security.acme.defaults.email = "jaspert.ras@gmail.com";
+ security.acme.acceptTerms = true;
+}