aboutsummaryrefslogtreecommitdiff
path: root/modules/nginx
diff options
context:
space:
mode:
authoraethrvmn <me@aethrvmn.gr>2025-11-30 21:59:43 +0000
committeraethrvmn <me@aethrvmn.gr>2025-11-30 21:59:43 +0000
commit893ea11e1dc05fe1a2a34e66d4ebcfdffda34720 (patch)
treeef454e299f49cbb58e1b9fbafd0b759b4379ac2a /modules/nginx
parentadded .lock to ignorelist (diff)
huge restructure of modules
Diffstat (limited to 'modules/nginx')
-rw-r--r--modules/nginx/default.nix40
1 files changed, 40 insertions, 0 deletions
diff --git a/modules/nginx/default.nix b/modules/nginx/default.nix
new file mode 100644
index 0000000..151a934
--- /dev/null
+++ b/modules/nginx/default.nix
@@ -0,0 +1,40 @@
+{
+ services = {
+ nginx = {
+ enable = true;
+ recommendedGzipSettings = true;
+ recommendedOptimisation = true;
+ recommendedProxySettings = true;
+ };
+
+ sshguard.enable = true;
+
+ openssh = {
+ enable = false;
+ settings = {
+ PermitRootLogin = false;
+ PasswordAuthentication = false;
+ AllowTcpForwarding = false;
+ X11Forwarding = false;
+ };
+ };
+ };
+
+ networking = {
+ firewall.allowedTCPPorts = [ 80 ];
+
+ hosts = {
+ "127.0.0.1" = [
+ "library.internal"
+ "media.internal"
+ "photos.internal"
+ "chat.internal"
+ "ollama.internal"
+ "code.internal"
+ "forge.internal"
+ "search.internal"
+ "monitor.internal"
+ ];
+ };
+ };
+}
Directive (EU) 2019/790, Article 4(3); all rights regarding Text and Data Mining (TDM) are reserved.