feat(tanzanite): nginx configuration for website

This commit is contained in:
stitchy 2024-12-21 19:19:45 -08:00
parent 38c9117551
commit 59ad109068
Signed by: stitchy
SSH key fingerprint: SHA256:f7Wxv5r7Ooi4z3GxqMBx50LlPRtY/kUK/Sw8K02PYys

View file

@ -17,6 +17,7 @@ in {
data-root = "/opt/data";
};
};
security.acme = {
acceptTerms = true;
defaults.email = "stitchy@stitchy.moe";
@ -26,9 +27,22 @@ in {
};
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
"stitchy.moe" = {
enableACME = true;
forceSSL = true;
root = "/opt/www/stitchy.moe/public";
};
};
};
networking.firewall = {
allowedTCPPorts = [ 22 80 222 443 ];
};
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ];