reidlab/nix-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

some nginx log and access changes

Browse source
This commit is contained in:
Reid 2024-03-19 22:47:33 -07:00
parent 913572b770
commit 68737c75e3
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/services/nginx-conf.nix
View file

@ -5,7 +5,7 @@ let
cfg = config.modules.services.nginx-config;
in {
options.modules.services.nginx-config = {
enable = mkEnableOption "enable nginx, a high performance web server along with default configurations";
enable = mkEnableOption "enable and configure nginx. you know what nginx is.";
package = mkOption {
type = types.package;
@ -28,6 +28,7 @@ in {
security.acme = {
acceptTerms = true;
defaults.email = "reidlab325@gmail.com";
# uncomment me for staging!
# defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
};
@ -40,8 +41,6 @@ in {
recommendedGzipSettings = true;
recommendedProxySettings = true;
logError = "stderr warn";
# TODO: clean this up oh my god like everything here :sob: im vomiting shaking and crying looking at this.
commonHttpConfig = let
# lua
@ -98,6 +97,9 @@ in {
${realIpsFromList cfipv6}
real_ip_header CF-Connecting-IP;
'';
# this prevents invalid domains and direct ip access from being used
virtualHosts."_".locations."/".return = "444";
};
networking.firewall.allowedTCPPorts = [ 443 80 ];