tv/2configs/nginx/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

{ config, lib, ... }:

with import <stockholm/lib>;

{
  services.nginx = {
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedTlsSettings = true;

    virtualHosts.${toJSON ""} = {
      default = true;
      extraConfig = ''
        error_page 400 =444 /;
        return 444;
      '';
      rejectSSL = true;
    };
  };
  tv.iptables = {
    input-retiolum-accept-tcp = singleton "http";
  };
}