nix machine / user configurations

feat: enable quic / ktls for rest of services

ptr.pet 93fa5e56 e7c77815

verified
Changed files
+8
hosts
+2
hosts/wolumonde/modules/forgejo.nix
···
services.nginx.virtualHosts."git.gaze.systems" = {
useACMEHost = "gaze.systems";
forceSSL = true;
+
quic = true;
+
kTLS = true;
locations."/" = {
extraConfig = ''
client_max_body_size 1000m;
+2
hosts/wolumonde/modules/hedgedoc.nix
···
services.nginx.virtualHosts."doc.gaze.systems" = {
useACMEHost = "gaze.systems";
forceSSL = true;
+
quic = true;
+
kTLS = true;
locations."/".proxyPass = "http://${config.services.hedgedoc.settings.host}:${toString config.services.hedgedoc.settings.port}";
};
}
+4
hosts/wolumonde/modules/limbusart.nix
···
services.nginx.virtualHosts."pmart.gaze.systems" = {
useACMEHost = "gaze.systems";
forceSSL = true;
+
quic = true;
+
kTLS = true;
locations."/".proxyPass = "http://localhost:3000";
};
# redirects
services.nginx.virtualHosts."limbus.gaze.systems" = {
useACMEHost = "gaze.systems";
forceSSL = true;
+
quic = true;
+
kTLS = true;
globalRedirect = "pmart.gaze.systems";
};
}