1
0
Fork 0

sail: Enable HTTP3

This commit is contained in:
Daniel Kempkens 2023-03-06 10:21:34 +01:00
parent 779371ac42
commit 2ac52f1b02
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
6 changed files with 14 additions and 0 deletions

View file

@ -39,6 +39,8 @@
services.nginx = { services.nginx = {
virtualHosts."tictac.daniel.sx" = { virtualHosts."tictac.daniel.sx" = {
http3 = true;
forceSSL = true; forceSSL = true;
useACMEHost = "daniel.sx"; useACMEHost = "daniel.sx";
basicAuthFile = config.age.secrets.proxitok-auth.path; basicAuthFile = config.age.secrets.proxitok-auth.path;

View file

@ -40,6 +40,8 @@ in
services.nginx = { services.nginx = {
virtualHosts."overflow.daniel.sx" = { virtualHosts."overflow.daniel.sx" = {
http3 = true;
root = "${anonymous-overflow-pkg}/share/anonymous-overflow/public/"; root = "${anonymous-overflow-pkg}/share/anonymous-overflow/public/";
forceSSL = true; forceSSL = true;
useACMEHost = "daniel.sx"; useACMEHost = "daniel.sx";

View file

@ -10,6 +10,8 @@
services.nginx = { services.nginx = {
virtualHosts."${secret.nginx.hostnames.libreddit}" = { virtualHosts."${secret.nginx.hostnames.libreddit}" = {
http3 = true;
forceSSL = true; forceSSL = true;
useACMEHost = "daniel.sx"; useACMEHost = "daniel.sx";
basicAuthFile = config.age.secrets.libreddit-auth.path; basicAuthFile = config.age.secrets.libreddit-auth.path;

View file

@ -1,6 +1,10 @@
{ pkgs, ... }:
{ {
services.nginx = { services.nginx = {
enable = true; enable = true;
package = pkgs.nginxQuic;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedBrotliSettings = true; recommendedBrotliSettings = true;

View file

@ -53,6 +53,8 @@ in
services.nginx = { services.nginx = {
virtualHosts."${secret.nginx.hostnames.nitter}" = { virtualHosts."${secret.nginx.hostnames.nitter}" = {
http3 = true;
root = "${nitter-pkg}/share/nitter/public/"; root = "${nitter-pkg}/share/nitter/public/";
forceSSL = true; forceSSL = true;
useACMEHost = "daniel.sx"; useACMEHost = "daniel.sx";

View file

@ -42,6 +42,8 @@ in
services.nginx = { services.nginx = {
virtualHosts."ringo.daniel.sx" = { virtualHosts."ringo.daniel.sx" = {
http3 = true;
forceSSL = true; forceSSL = true;
useACMEHost = "daniel.sx"; useACMEHost = "daniel.sx";
basicAuthFile = config.age.secrets.rimgo-auth.path; basicAuthFile = config.age.secrets.rimgo-auth.path;