xengi/infra
0
1
Fork 0
Code Pull requests Activity Actions

nginx restructure

Browse source
This commit is contained in:
XenGi 2026-02-13 17:48:11 +01:00
parent 854dace74e
commit b177613b1e
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
10 changed files with 168 additions and 114 deletions
Download patch file Download diff file Expand all files Collapse all files

34
hosts/www/default.nix Normal file
View file

@ -0,0 +1,34 @@
{ ... }:
{
imports = [
../common.nix
../../services/openssh.nix
../../services/nginx.nix
];
networking = {
hostName = "www";
firewall = {
allowedTCPPorts = [
80 # HTTP/1
443 # HTTP/2
];
allowedUDPPorts = [
443 # HTTP/3
];
};
};
services = {
openssh.banner = ''
__ __ __ __ __ __ __ __ __
/\ \/\ \/\ \/\ \/\ \/\ \/\ \/\ \/\ \
\ \ \_/ \_/ \ \ \_/ \_/ \ \ \_/ \_/ \
\ \___x___/'\ \___x___/'\ \___x___/'
\/__//__/ \/__//__/ \/__//__/
'';
};
system.stateVersion = "25.11";
}

21
hosts/www/nginx.nix Normal file
View file

@ -0,0 +1,21 @@
{ config, ... }:
let
# TODO: mkVHost
in
{
services.nginx.virtualHosts."${config.networking.hostName}.${config.networking.domain}" = {
default = true;
serverAliases = [${config.networking.domain}];
quic = true;
kTLS = true;
forceSSL = true;
enableACME = true;
root = "/srv/http/www";
index = "index.html";
locations."/" = {
try_files = "$uri $uri/ $uri.html =404";
};
};
}