]> Git — Sourcephile - sourcephile-nix.git/blob - hosts/mermet/nginx/sourcephile.fr/lemoutona5pattes.nix
openvpn: fix tls-cipher
[sourcephile-nix.git] / hosts / mermet / nginx / sourcephile.fr / lemoutona5pattes.nix
1 { domain, ... }:
2 { pkgs, lib, config, ... }:
3 let
4 inherit (config) networking;
5 inherit (config.services) nginx;
6 srv = "lemoutona5pattes";
7 in
8 {
9 systemd.services.nginx.serviceConfig = {
10 BindPaths = [ "/home/julm/work/sourcephile/${srv}:/www" ];
11 };
12 services.nginx = {
13 virtualHosts."${srv}.${domain}" = {
14 forceSSL = true;
15 useACMEHost = domain;
16 root = "/www";
17 extraConfig = ''
18 access_log /var/log/nginx/${domain}/${srv}/access.log json buffer=32k;
19 error_log /var/log/nginx/${domain}/${srv}/error.log warn;
20 '';
21 locations."/".extraConfig = ''
22 #autoindex on;
23 fancyindex on;
24 fancyindex_name_length 255;
25 fancyindex_exact_size off;
26 '';
27 };
28 };
29 systemd.services.nginx.serviceConfig.LogsDirectory = lib.mkForce ["nginx/${domain}/${srv}"];
30 }