xengi/infra
0
1
Fork 0
Code Pull requests Activity Actions

add mta-sts

Browse source
This commit is contained in:
XenGi 2026-05-07 13:29:33 +02:00
parent 049fcb73c9
commit 9a1eed241f
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
1 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/www/nginx.nix
View file

@ -10,6 +10,21 @@ in
]; ];
services.nginx.virtualHosts = { services.nginx.virtualHosts = {
"mta-sts.${config.networking.domain}" = {
quic = true;
kTLS = true;
forceSSL = true;
enableACME = true;
extraConfig = ''
add_header Strict-Transport-Security max-age=15768000;
'';
locations."= /.well-known/mta-sts.txt" = {
alias = "/srv/http/mta-sts.txt";
extraConfig = ''
default_type text/plain;
'';
};
};
"www.${config.networking.domain}" = { "www.${config.networking.domain}" = {
default = true; default = true;
serverAliases = [ config.networking.domain ]; serverAliases = [ config.networking.domain ];