mirror of
https://github.com/ivabus/nixos
synced 2024-11-10 02:25:18 +03:00
Enable http/3 on all websites
Signed-off-by: Ivan Bushchik <ivabus@ivabus.dev>
This commit is contained in:
parent
a2143c22ab
commit
89c283ee99
|
@ -61,33 +61,39 @@ in {
|
|||
locations."/".proxyPass = "http://${secrets.maas-address}:8081";
|
||||
enableACME = true;
|
||||
addSSL = true;
|
||||
http3 = true;
|
||||
serverAliases = [ "www.iva.bz" ];
|
||||
};
|
||||
virtualHosts."xn--80acbx2cl.xn--p1ai" = {
|
||||
locations."/".proxyPass = "http://${secrets.maas-address}:8083";
|
||||
enableACME = true;
|
||||
addSSL = true;
|
||||
http3 = true;
|
||||
serverAliases = [ "ивабус.рф" ];
|
||||
};
|
||||
virtualHosts."music.ivabus.dev" = {
|
||||
locations."/".proxyPass = "http://${secrets.maas-address}:4533";
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
http3 = true;
|
||||
};
|
||||
virtualHosts."storage.ivabus.dev" = {
|
||||
locations."/".proxyPass = "http://${secrets.maas-address}:80";
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
http3 = true;
|
||||
};
|
||||
virtualHosts."slides.ivabus.dev" = {
|
||||
locations."/".proxyPass = "http://${secrets.maas-address}:80";
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
http3 = true;
|
||||
};
|
||||
virtualHosts."git.ivabus.dev" = {
|
||||
locations."/".proxyPass = "http://${secrets.maas-address}:3000";
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
http3 = true;
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
@ -9,6 +9,7 @@ in {
|
|||
virtualHosts."ivabus.dev" = {
|
||||
forceSSL = true;
|
||||
enableACME = true;
|
||||
http3 = true;
|
||||
|
||||
root = pkgs.callPackage ../../pkgs/ivabus-dev.nix { };
|
||||
|
||||
|
|
|
@ -7,6 +7,7 @@ in {
|
|||
config = lib.mkIf (cfg.enable) {
|
||||
services.nginx = {
|
||||
enable = true;
|
||||
package = pkgs.nginxQuic;
|
||||
recommendedGzipSettings = true;
|
||||
recommendedOptimisation = true;
|
||||
recommendedProxySettings = true;
|
||||
|
@ -18,5 +19,6 @@ in {
|
|||
defaults.email = "ivabus@ivabus.dev";
|
||||
};
|
||||
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
||||
networking.firewall.allowedUDPPorts = [ 80 443 ];
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue