sail: Enable HTTP3

container/proxitok/default.nix

@@ -39,6 +39,8 @@
 
   services.nginx = {
     virtualHosts."tictac.daniel.sx" = {
+      http3 = true;
+
       forceSSL = true;
       useACMEHost = "daniel.sx";
       basicAuthFile = config.age.secrets.proxitok-auth.path;

system/nixos/anonymous-overflow.nix

@@ -40,6 +40,8 @@ in
 
   services.nginx = {
     virtualHosts."overflow.daniel.sx" = {
+      http3 = true;
+
       root = "${anonymous-overflow-pkg}/share/anonymous-overflow/public/";
       forceSSL = true;
       useACMEHost = "daniel.sx";

system/nixos/libreddit.nix

@@ -10,6 +10,8 @@
 
   services.nginx = {
     virtualHosts."${secret.nginx.hostnames.libreddit}" = {
+      http3 = true;
+
       forceSSL = true;
       useACMEHost = "daniel.sx";
       basicAuthFile = config.age.secrets.libreddit-auth.path;

system/nixos/nginx.nix

@@ -1,6 +1,10 @@
+{ pkgs, ... }:
+
 {
   services.nginx = {
     enable = true;
+    package = pkgs.nginxQuic;
+
     recommendedOptimisation = true;
     recommendedGzipSettings = true;
     recommendedBrotliSettings = true;

system/nixos/nitter.nix

@@ -53,6 +53,8 @@ in
 
   services.nginx = {
     virtualHosts."${secret.nginx.hostnames.nitter}" = {
+      http3 = true;
+
       root = "${nitter-pkg}/share/nitter/public/";
       forceSSL = true;
       useACMEHost = "daniel.sx";

system/nixos/rimgo.nix

@@ -42,6 +42,8 @@ in
 
   services.nginx = {
     virtualHosts."ringo.daniel.sx" = {
+      http3 = true;
+
       forceSSL = true;
       useACMEHost = "daniel.sx";
       basicAuthFile = config.age.secrets.rimgo-auth.path;