dump-dvb/nix-config
dump-dvb/nix-config
3
0
Fork 0
mirror of https://github.com/dump-dvb/nix-config.git synced 2024-06-15 04:16:57 +02:00
Code Issues Projects Releases Wiki Activity

better nginx defaults

Browse Source
This commit is contained in:
oxapentane - 2022-05-13 20:19:32 +02:00
parent 58c10b5935
commit a6602f815b
Signed by: oxapentane
GPG Key ID: 91FA5E5BF9AA901C
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
flake.nix
View File

@ -124,6 +124,7 @@
./modules/numbering.nix
./modules/grafana.nix
./modules/website.nix
./modules/documentation.nix
{
nixpkgs.overlays = [
data-accumulator.overlay."x86_64-linux"

9
modules/nginx.nix
View File

@ -1,7 +1,11 @@
{ pkgs, config, lib, ... }: {
security.acme.acceptTerms = true;
security.acme.email = "dump-dvb@protonmail.com";
services.nginx.commonHttpConfig = ''
services.nginx = {
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
commonHttpConfig = ''
# Enable CSP for your services.
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
@ -17,5 +21,6 @@
# Enable XSS protection of the browser.
# May be unnecessary when CSP is configured properly (see above)
add_header X-XSS-Protection "1; mode=block";
'';
'';
};
}