Partial rollout of HTTP/3

nixos/hosts/silver/services/breeze.nix

@@ -9,11 +9,14 @@ in {
 
   services.nginx = {
     virtualHosts.${dom} = {
+      forceSSL = true;
+      enableACME = true;
+
+      quic = true;
+
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString httpIntPort}";
       };
-      forceSSL = true;
-      enableACME = true;
     };
   };
 

nixos/hosts/silver/services/default.nix

@@ -1,4 +1,4 @@
-{...}: {
+{pkgs, ...}: {
   imports = [
     ./vcnotifier.nix
     # ./nodemusicbot.nix
@@ -15,6 +15,8 @@
 
   services.nginx = {
     enable = true;
+    package = pkgs.nginxQuic;
+
     recommendedZstdSettings = true;
     recommendedGzipSettings = true;
     recommendedBrotliSettings = true;

nixos/hosts/silver/services/gitea.nix

@@ -6,11 +6,12 @@
 in {
   services.nginx = {
     virtualHosts.${dom} = {
+      forceSSL = true;
+      enableACME = true;
+
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString httpIntPort}";
       };
-      forceSSL = true;
-      enableACME = true;
     };
     streamConfig = ''
       upstream gitea {

nixos/hosts/silver/services/min-rip.nix

@@ -6,6 +6,8 @@ in {
     forceSSL = true;
     enableACME = true;
 
+    quic = true;
+
     locations."/" = {
       tryFiles = "$uri $uri/ =404";
       extraConfig = ''

nixos/hosts/silver/services/synapse.nix

@@ -9,11 +9,12 @@
 in {
   services.nginx = {
     virtualHosts.${domHost} = {
+      forceSSL = true;
+      enableACME = true;
+
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString httpIntPort}";
       };
-      forceSSL = true;
-      enableACME = true;
     };
     virtualHosts.${domDelegate} = {
       locations."/.well-known/matrix/client" = {