oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-15 06:30:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

123

Browse Source
This commit is contained in:
Jor Oqyude
2025-08-17 16:24:13 +03:00
parent aa7ce4e012
commit e0f22c63cb
1 changed files with 32 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixosModules/vds/nginx.nix
+32 -32
View File
@@ -9,7 +9,7 @@ in
{ {
services = { services = {
nginx = { nginx = {
enable = true; enable = false;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;
@@ -50,38 +50,38 @@ in
# }; # };
}; };
}; };
blocky = { # blocky = {
enable = true; # enable = true;
settings = { # settings = {
ports.dns = 53; # Port for incoming DNS Queries. # ports.dns = 53; # Port for incoming DNS Queries.
upstreams.groups.default = [ # upstreams.groups.default = [
"https://dns.quad9.net/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries. # "https://dns.quad9.net/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries.
]; # ];
# For initially solving DoH/DoT Requests when no system Resolver is available. # # For initially solving DoH/DoT Requests when no system Resolver is available.
bootstrapDns = { # bootstrapDns = {
upstream = "https://dns.quad9.net/dns-query"; # upstream = "https://dns.quad9.net/dns-query";
ips = [ "9.9.9.9" ]; # ips = [ "9.9.9.9" ];
}; # };
# Custom DNS entries # # Custom DNS entries
customDNS = { # customDNS = {
mapping = { # mapping = {
"immich.zeroq.ru" = "100.90.0.0"; # "immich.zeroq.ru" = "100.90.0.0";
}; # };
}; # };
}; # };
}; # };
};
security.acme = {
acceptTerms = true;
defaults.email = "go.bin043120@gmail.com";
certs."immich.zeroq.ru" = {
email = "go.bin043120@gmail.com";
dnsProvider = "cloudflare";
dnsResolver = "1.1.1.1";
environmentFile = "${inputs.zeroq-credentials}/accounts/cloudflare.txt";
webroot = null; # Required in my case
};
}; };
# security.acme = {
# acceptTerms = true;
# defaults.email = "go.bin043120@gmail.com";
# certs."immich.zeroq.ru" = {
# email = "go.bin043120@gmail.com";
# dnsProvider = "cloudflare";
# dnsResolver = "1.1.1.1";
# environmentFile = "${inputs.zeroq-credentials}/accounts/cloudflare.txt";
# webroot = null; # Required in my case
# };
# };
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
80 80
443 443