···

       
23
       
23
       
 
       
  # nginx

     

       
24
       
24
       
 
       
  services.nginx = {

     

       
25
       
25
       
 
       
    enable = true;

     

       
26
       
26
       
+
       
    recommendedTlsSettings = true;

     

       
27
       
27
       
+
       
    recommendedOptimisation = true;

     

       
28
       
28
       
+
       
    recommendedGzipSettings = true;

     

       
29
       
29
       
+
       
    recommendedProxySettings = true;

     

       
26
       
30
       
 
       
    virtualHosts."gaze.systems" = {

     

       
27
       
31
       
 
       
      enableACME = true;

     

       
28
       
32
       
 
       
      forceSSL = true;

     
···

       
35
       
39
       
 
       
      "gaze.systems".email = "y.bera003.06@pm.me";

     

       
36
       
40
       
 
       
    };

     

       
37
       
41
       
 
       
  };

     

       
42
       
42
       
+
       


     

       
43
       
43
       
+
       
  # sourcehut

     

       
38
       
44
       
 
       


     

       
39
       
45
       
 
       
  # firewall stuffs

     

       
40
       
46
       
 
       
  networking.firewall = {