From a911f15b769ffd0b53471a74e210f00b29b34d28 Mon Sep 17 00:00:00 2001
From: Jasper Ras <jaspert.ras@gmail.com>
Date: Sun, 9 Feb 2025 20:55:53 +0100
Subject: mod + nginx

---
 configuration/snorlax/nginx.nix | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 configuration/snorlax/nginx.nix

(limited to 'configuration/snorlax/nginx.nix')

diff --git a/configuration/snorlax/nginx.nix b/configuration/snorlax/nginx.nix
new file mode 100644
index 0000000..cc38496
--- /dev/null
+++ b/configuration/snorlax/nginx.nix
@@ -0,0 +1,21 @@
+{ ... }:
+{
+  networking.firewall.allowedTCPPorts = [ 443 ];
+
+  services.nginx = {
+    enable = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts = {
+      "jras.nl" = {
+        onlySSL = true;
+        kTLS = true;
+        enableACME = true;
+        root = "/srv/www/jras.nl";
+      };
+    };
+  };
+
+  security.acme.defaults.email = "jaspert.ras@gmail.com";
+  security.acme.acceptTerms = true;
+}
-- 
cgit v1.2.3