feat(tanzanite): nginx configuration for website

This commit is contained in:
stitchy 2024-12-21 19:19:45 -08:00
parent 38c9117551
commit 59ad109068
Signed by: stitchy
SSH key fingerprint: SHA256:f7Wxv5r7Ooi4z3GxqMBx50LlPRtY/kUK/Sw8K02PYys

View file

@ -17,6 +17,7 @@ in {
data-root = "/opt/data"; data-root = "/opt/data";
}; };
}; };
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults.email = "stitchy@stitchy.moe"; defaults.email = "stitchy@stitchy.moe";
@ -26,9 +27,22 @@ in {
}; };
}; };
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
"stitchy.moe" = {
enableACME = true;
forceSSL = true;
root = "/opt/www/stitchy.moe/public";
};
}; };
};
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 22 80 222 443 ]; allowedTCPPorts = [ 22 80 222 443 ];
};
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [ ];