bryan/nixos
0
0
Fork 0
mirror of https://github.com/itme-brain/nixos.git synced 2026-03-24 00:29:43 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

added ssl

Browse source
This commit is contained in:
Bryan Ramos 2026-03-12 03:07:09 -04:00
parent a10ba82767
commit e2e6fb5dae
1 changed files with 15 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

30
src/system/modules/nginx/default.nix
View file

@ -12,29 +12,29 @@ in
};
config = mkIf cfg.enable {
networking.firewall.allowedTCPPorts = [ 80 /* 443 */ ];
networking.firewall.allowedTCPPorts = [ 80 443 ];
# security.acme = {
# acceptTerms = true;
# defaults.email = config.user.email;
#
# certs."${domain}" = {
# domain = "*.${domain}";
# dnsProvider = "namecheap";
# environmentFile = "/var/lib/acme/namecheap.env";
# group = "nginx";
# };
# };
security.acme = {
acceptTerms = true;
defaults.email = config.user.email;
certs."${domain}" = {
domain = "*.${domain}";
dnsProvider = "namecheap";
environmentFile = "/var/lib/acme/namecheap.env";
group = "nginx";
};
};
services.nginx = {
enable = true;
# recommendedTlsSettings = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
virtualHosts."test.${domain}" = {
# useACMEHost = domain;
# forceSSL = true;
useACMEHost = domain;
forceSSL = true;
locations."/" = {
return = "200 'nginx is working'";
extraConfig = ''