oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-11 04:30:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

123

Browse Source
This commit is contained in:
Jor Oqyude
2025-08-17 16:24:13 +03:00
parent aa7ce4e012
commit e0f22c63cb
1 changed files with 32 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixosModules/vds/nginx.nix
+32 -32
View File
@@ -9,7 +9,7 @@ in
{
services = {
nginx = {
enable = true;
enable = false;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
@@ -50,38 +50,38 @@ in
# };
};
};
blocky = {
enable = true;
settings = {
ports.dns = 53; # Port for incoming DNS Queries.
upstreams.groups.default = [
"https://dns.quad9.net/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries.
];
# For initially solving DoH/DoT Requests when no system Resolver is available.
bootstrapDns = {
upstream = "https://dns.quad9.net/dns-query";
ips = [ "9.9.9.9" ];
};
# Custom DNS entries
customDNS = {
mapping = {
"immich.zeroq.ru" = "100.90.0.0";
};
};
};
};
};
security.acme = {
acceptTerms = true;
defaults.email = "go.bin043120@gmail.com";
certs."immich.zeroq.ru" = {
email = "go.bin043120@gmail.com";
dnsProvider = "cloudflare";
dnsResolver = "1.1.1.1";
environmentFile = "${inputs.zeroq-credentials}/accounts/cloudflare.txt";
webroot = null; # Required in my case
};
# blocky = {
# enable = true;
# settings = {
# ports.dns = 53; # Port for incoming DNS Queries.
# upstreams.groups.default = [
# "https://dns.quad9.net/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries.
# ];
# # For initially solving DoH/DoT Requests when no system Resolver is available.
# bootstrapDns = {
# upstream = "https://dns.quad9.net/dns-query";
# ips = [ "9.9.9.9" ];
# };
# # Custom DNS entries
# customDNS = {
# mapping = {
# "immich.zeroq.ru" = "100.90.0.0";
# };
# };
# };
# };
};
# security.acme = {
# acceptTerms = true;
# defaults.email = "go.bin043120@gmail.com";
# certs."immich.zeroq.ru" = {
# email = "go.bin043120@gmail.com";
# dnsProvider = "cloudflare";
# dnsResolver = "1.1.1.1";
# environmentFile = "${inputs.zeroq-credentials}/accounts/cloudflare.txt";
# webroot = null; # Required in my case
# };
# };
networking.firewall.allowedTCPPorts = [
80
443