diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-24 20:59:41 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-24 20:59:41 +0100 |
| commit | 522c8a27dbde0d337c40aa05597c43df05f5ff8f (patch) | |
| tree | a9f5457a6a1c37f7df2e2815c79e2e0cdd6e5b67 /hosts/surtr/default.nix | |
| parent | 026ea0b58ce6f7521090ec3dadd6ae10cdf7e66c (diff) | |
| download | nixos-522c8a27dbde0d337c40aa05597c43df05f5ff8f.tar nixos-522c8a27dbde0d337c40aa05597c43df05f5ff8f.tar.gz nixos-522c8a27dbde0d337c40aa05597c43df05f5ff8f.tar.bz2 nixos-522c8a27dbde0d337c40aa05597c43df05f5ff8f.tar.xz nixos-522c8a27dbde0d337c40aa05597c43df05f5ff8f.zip | |
surtr: synapse.li: ...
Diffstat (limited to 'hosts/surtr/default.nix')
| -rw-r--r-- | hosts/surtr/default.nix | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix index add50653..7ab3199b 100644 --- a/hosts/surtr/default.nix +++ b/hosts/surtr/default.nix | |||
| @@ -2,7 +2,7 @@ | |||
| 2 | { | 2 | { |
| 3 | imports = with flake.nixosModules.systemProfiles; [ | 3 | imports = with flake.nixosModules.systemProfiles; [ |
| 4 | qemu-guest openssh rebuild-machines zfs | 4 | qemu-guest openssh rebuild-machines zfs |
| 5 | ./zfs.nix ./dns ./tls ./http.nix ./bifrost | 5 | ./zfs.nix ./dns ./tls ./http.nix ./bifrost ./matrix.nix ./postgres.nix |
| 6 | ]; | 6 | ]; |
| 7 | 7 | ||
| 8 | config = { | 8 | config = { |
| @@ -139,5 +139,15 @@ | |||
| 139 | automatic = true; | 139 | automatic = true; |
| 140 | options = "--delete-older-than 30d"; | 140 | options = "--delete-older-than 30d"; |
| 141 | }; | 141 | }; |
| 142 | |||
| 143 | security.dhparams = { | ||
| 144 | enable = true; | ||
| 145 | defaultBitSize = 4096; | ||
| 146 | params = { | ||
| 147 | nginx = {}; | ||
| 148 | matrix-synapse = {}; | ||
| 149 | }; | ||
| 150 | stateful = true; | ||
| 151 | }; | ||
| 142 | }; | 152 | }; |
| 143 | } | 153 | } |
