configuration/snorlax/nginx.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ ... }:
{
  networking.firewall.allowedTCPPorts = [ 443 ];

  services.nginx = {
    enable = true;
    recommendedTlsSettings = true;

    virtualHosts = {
      "jras.nl" = {
        onlySSL = true;
        kTLS = true;
        enableACME = true;
        root = "/srv/www/jras.nl";
      };
    };
  };

  security.acme.defaults.email = "jaspert.ras@gmail.com";
  security.acme.acceptTerms = true;
}