diff options
| author | Mel <einebeere@gmail.com> | 2024-11-04 03:26:19 +0100 |
|---|---|---|
| committer | Mel <einebeere@gmail.com> | 2024-11-04 03:26:19 +0100 |
| commit | 9a52eff1c92d63ea7309a4b0768f572973b5a6e6 (patch) | |
| tree | fe565a90381c7716ba093b4ba11b432f8b0494eb /modules/www.nix | |
| parent | 2fc26761a1e93e6212845ebd005eab71da704d6e (diff) | |
| download | network-9a52eff1c92d63ea7309a4b0768f572973b5a6e6.tar.zst network-9a52eff1c92d63ea7309a4b0768f572973b5a6e6.zip | |
Add basic renard server config
Signed-off-by: Mel <einebeere@gmail.com>
Diffstat (limited to 'modules/www.nix')
| -rw-r--r-- | modules/www.nix | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/modules/www.nix b/modules/www.nix new file mode 100644 index 0000000..1df69cf --- /dev/null +++ b/modules/www.nix @@ -0,0 +1,31 @@ +{ me, ... }: + +let + rnrdUrl = + if me == "renard" + then "rnrd.eu" + else "${me}.rnrd.eu"; +in +{ + security.acme = { + acceptTerms = true; + defaults.email = "einebeere@gmail.com"; + }; + + services.nginx = { + enable = true; + recommendedGzipSettings = true; + recommendedOptimisation = true; + recommendedProxySettings = true; + recommendedTlsSettings = true; + + virtualHosts = { + default = { default = true; }; + ${rnrdUrl} = { + root = "/var/www/html"; + forceSSL = true; + enableACME = true; + }; + }; + }; +} |
