diff --git a/nixos/hosts/silver/services/breeze.nix b/nixos/hosts/silver/services/breeze.nix index c3c1bd1..814f611 100644 --- a/nixos/hosts/silver/services/breeze.nix +++ b/nixos/hosts/silver/services/breeze.nix @@ -9,11 +9,14 @@ in { services.nginx = { virtualHosts.${dom} = { + forceSSL = true; + enableACME = true; + + quic = true; + locations."/" = { proxyPass = "http://127.0.0.1:${toString httpIntPort}"; }; - forceSSL = true; - enableACME = true; }; }; diff --git a/nixos/hosts/silver/services/default.nix b/nixos/hosts/silver/services/default.nix index 75051e2..3ba2625 100644 --- a/nixos/hosts/silver/services/default.nix +++ b/nixos/hosts/silver/services/default.nix @@ -1,4 +1,4 @@ -{...}: { +{pkgs, ...}: { imports = [ ./vcnotifier.nix # ./nodemusicbot.nix @@ -15,6 +15,8 @@ services.nginx = { enable = true; + package = pkgs.nginxQuic; + recommendedZstdSettings = true; recommendedGzipSettings = true; recommendedBrotliSettings = true; diff --git a/nixos/hosts/silver/services/gitea.nix b/nixos/hosts/silver/services/gitea.nix index 642ad2a..23fed94 100644 --- a/nixos/hosts/silver/services/gitea.nix +++ b/nixos/hosts/silver/services/gitea.nix @@ -6,11 +6,12 @@ in { services.nginx = { virtualHosts.${dom} = { + forceSSL = true; + enableACME = true; + locations."/" = { proxyPass = "http://127.0.0.1:${toString httpIntPort}"; }; - forceSSL = true; - enableACME = true; }; streamConfig = '' upstream gitea { diff --git a/nixos/hosts/silver/services/min-rip.nix b/nixos/hosts/silver/services/min-rip.nix index 9c151c9..1098cd4 100644 --- a/nixos/hosts/silver/services/min-rip.nix +++ b/nixos/hosts/silver/services/min-rip.nix @@ -6,6 +6,8 @@ in { forceSSL = true; enableACME = true; + quic = true; + locations."/" = { tryFiles = "$uri $uri/ =404"; extraConfig = '' diff --git a/nixos/hosts/silver/services/synapse.nix b/nixos/hosts/silver/services/synapse.nix index d65b0f5..a283c5c 100644 --- a/nixos/hosts/silver/services/synapse.nix +++ b/nixos/hosts/silver/services/synapse.nix @@ -9,11 +9,12 @@ in { services.nginx = { virtualHosts.${domHost} = { + forceSSL = true; + enableACME = true; + locations."/" = { proxyPass = "http://127.0.0.1:${toString httpIntPort}"; }; - forceSSL = true; - enableACME = true; }; virtualHosts.${domDelegate} = { locations."/.well-known/matrix/client" = {