modules/nginx/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

{
	services = {
		nginx = {
			enable = true;
	    recommendedGzipSettings = true;
	    recommendedOptimisation = true;
	    recommendedProxySettings = true;
		};

		sshguard.enable = true;

		openssh = {
		  enable  = false;
		  settings = {
		    PermitRootLogin = false;
		    PasswordAuthentication = false;
		    AllowTcpForwarding = false;
		    X11Forwarding = false;
		  };
		};
	};

	networking = {
		firewall.allowedTCPPorts = [ 80 ];

		hosts = {
		  "127.0.0.1" = [
		  	"library.internal"
		  	"media.internal"
		  	"photos.internal"
		  	"chat.internal"
		  	"ollama.internal"
		  	"code.internal"
		  	"forge.internal"
		  	"search.internal"
		  	"monitor.internal"
		  ];
		};
	};
}