summaryrefslogtreecommitdiff
path: root/hosts/ahmed/nginx/default.nix
blob: 24dde85a898d50690e79d579df2c101c173b0117 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# This module sets up an NGINX on this host.
#
# Different services' will register themselves with NGINX via
# `services.nginx.virtualHosts`. They may also want to order themselves before
# NGINX `systemd.services.*.{before,wantedBy}`.
{config, ...}: {
  # Virtual hosts.
  services.nginx.enable = true;

  # Configure ACME. This is used by various HTTP services through the NGINX virtual hosts.
  security.acme = {
    acceptTerms = true;
    defaults.email = "linusvejlo+${config.networking.hostName}[email protected]";
  };

  # Allow HTTP connections.
  networking.firewall.allowedTCPPorts = [80 443];
}