]> Git — Sourcephile - sourcephile-nix.git/blob - machines/mermet/nginx/sourcephile.fr/lemoutona5pattes.nix
malloc: disable unstable scudo hardening
[sourcephile-nix.git] / machines / mermet / nginx / sourcephile.fr / lemoutona5pattes.nix
1 { domain, ... }:
2 { pkgs, lib, config, ... }:
3 let
4 inherit (config) networking;
5 inherit (config.services) nginx;
6 srv = "lemoutona5pattes";
7 in
8 {
9 services.nginx = {
10 virtualHosts."${srv}" = {
11 serverName = "${srv}.${domain}";
12 forceSSL = true;
13 useACMEHost = domain;
14 root = "/home/julm/www/${srv}";
15 extraConfig = ''
16 access_log /var/log/nginx/${domain}/${srv}/access.log json buffer=32k;
17 error_log /var/log/nginx/${domain}/${srv}/error.log warn;
18 '';
19 locations."/".extraConfig = ''
20 #autoindex on;
21 fancyindex on;
22 fancyindex_name_length 255;
23 fancyindex_exact_size off;
24 '';
25 };
26 };
27 systemd.services.nginx.serviceConfig.LogsDirectory = lib.mkForce ["nginx/${domain}/${srv}"];
28 }