From 4507d9bdc85f84ebb007fb19d26e25c45c4719e8 Mon Sep 17 00:00:00 2001
From: min <minish@riseup.net>
Date: Sun, 13 Oct 2024 19:14:29 -0400
Subject: [PATCH] Partial rollout of HTTP/3

---
 nixos/hosts/silver/services/breeze.nix  | 7 +++++--
 nixos/hosts/silver/services/default.nix | 4 +++-
 nixos/hosts/silver/services/gitea.nix   | 5 +++--
 nixos/hosts/silver/services/min-rip.nix | 2 ++
 nixos/hosts/silver/services/synapse.nix | 5 +++--
 5 files changed, 16 insertions(+), 7 deletions(-)

diff --git a/nixos/hosts/silver/services/breeze.nix b/nixos/hosts/silver/services/breeze.nix
index c3c1bd1..814f611 100644
--- a/nixos/hosts/silver/services/breeze.nix
+++ b/nixos/hosts/silver/services/breeze.nix
@@ -9,11 +9,14 @@ in {
 
   services.nginx = {
     virtualHosts.${dom} = {
+      forceSSL = true;
+      enableACME = true;
+
+      quic = true;
+
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString httpIntPort}";
       };
-      forceSSL = true;
-      enableACME = true;
     };
   };
 
diff --git a/nixos/hosts/silver/services/default.nix b/nixos/hosts/silver/services/default.nix
index 75051e2..3ba2625 100644
--- a/nixos/hosts/silver/services/default.nix
+++ b/nixos/hosts/silver/services/default.nix
@@ -1,4 +1,4 @@
-{...}: {
+{pkgs, ...}: {
   imports = [
     ./vcnotifier.nix
     # ./nodemusicbot.nix
@@ -15,6 +15,8 @@
 
   services.nginx = {
     enable = true;
+    package = pkgs.nginxQuic;
+
     recommendedZstdSettings = true;
     recommendedGzipSettings = true;
     recommendedBrotliSettings = true;
diff --git a/nixos/hosts/silver/services/gitea.nix b/nixos/hosts/silver/services/gitea.nix
index 642ad2a..23fed94 100644
--- a/nixos/hosts/silver/services/gitea.nix
+++ b/nixos/hosts/silver/services/gitea.nix
@@ -6,11 +6,12 @@
 in {
   services.nginx = {
     virtualHosts.${dom} = {
+      forceSSL = true;
+      enableACME = true;
+
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString httpIntPort}";
       };
-      forceSSL = true;
-      enableACME = true;
     };
     streamConfig = ''
       upstream gitea {
diff --git a/nixos/hosts/silver/services/min-rip.nix b/nixos/hosts/silver/services/min-rip.nix
index 9c151c9..1098cd4 100644
--- a/nixos/hosts/silver/services/min-rip.nix
+++ b/nixos/hosts/silver/services/min-rip.nix
@@ -6,6 +6,8 @@ in {
     forceSSL = true;
     enableACME = true;
 
+    quic = true;
+
     locations."/" = {
       tryFiles = "$uri $uri/ =404";
       extraConfig = ''
diff --git a/nixos/hosts/silver/services/synapse.nix b/nixos/hosts/silver/services/synapse.nix
index d65b0f5..a283c5c 100644
--- a/nixos/hosts/silver/services/synapse.nix
+++ b/nixos/hosts/silver/services/synapse.nix
@@ -9,11 +9,12 @@
 in {
   services.nginx = {
     virtualHosts.${domHost} = {
+      forceSSL = true;
+      enableACME = true;
+
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString httpIntPort}";
       };
-      forceSSL = true;
-      enableACME = true;
     };
     virtualHosts.${domDelegate} = {
       locations."/.well-known/matrix/client" = {