43 lines
731 B
Nix
43 lines
731 B
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
|
|
{
|
|
config = {
|
|
users = {
|
|
users = {
|
|
nginx = {
|
|
group = "nginx";
|
|
extraGroups = [
|
|
"acme"
|
|
"users"
|
|
];
|
|
isSystemUser = true;
|
|
};
|
|
};
|
|
groups = {
|
|
nginx = { };
|
|
};
|
|
};
|
|
services = {
|
|
nginx = {
|
|
enable = true;
|
|
recommendedTlsSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedGzipSettings = true;
|
|
recommendedProxySettings = true;
|
|
clientMaxBodySize = "10G";
|
|
statusPage = true;
|
|
};
|
|
};
|
|
security = {
|
|
acme = {
|
|
acceptTerms = true;
|
|
defaults.email = config.user.email;
|
|
};
|
|
};
|
|
};
|
|
}
|