diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2024-08-17 15:24:06 +0200 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2024-08-17 15:24:06 +0200 |
commit | 01e8a4dd21c98dadc2ddc698412c2ea51566b43e (patch) | |
tree | 34ff4233fa01e99d3f5d9e63ff7755417e8ffa2a /hosts/surtr/http/default.nix | |
parent | d8e86bb2f97b5479f45acf86a2fe591dbc4d0d9f (diff) | |
download | nixos-01e8a4dd21c98dadc2ddc698412c2ea51566b43e.tar nixos-01e8a4dd21c98dadc2ddc698412c2ea51566b43e.tar.gz nixos-01e8a4dd21c98dadc2ddc698412c2ea51566b43e.tar.bz2 nixos-01e8a4dd21c98dadc2ddc698412c2ea51566b43e.tar.xz nixos-01e8a4dd21c98dadc2ddc698412c2ea51566b43e.zip |
...
Diffstat (limited to 'hosts/surtr/http/default.nix')
-rw-r--r-- | hosts/surtr/http/default.nix | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/hosts/surtr/http/default.nix b/hosts/surtr/http/default.nix index c70eb8f8..f3a7154e 100644 --- a/hosts/surtr/http/default.nix +++ b/hosts/surtr/http/default.nix | |||
@@ -8,7 +8,7 @@ | |||
8 | services.nginx = { | 8 | services.nginx = { |
9 | enable = true; | 9 | enable = true; |
10 | package = pkgs.nginxQuic; | 10 | package = pkgs.nginxQuic; |
11 | recommendedGzipSettings = true; | 11 | recommendedGzipSettings = false; |
12 | recommendedProxySettings = true; | 12 | recommendedProxySettings = true; |
13 | recommendedTlsSettings = true; | 13 | recommendedTlsSettings = true; |
14 | sslDhparam = config.security.dhparams.params.nginx.path; | 14 | sslDhparam = config.security.dhparams.params.nginx.path; |
@@ -35,7 +35,6 @@ | |||
35 | systemd.services.nginx = { | 35 | systemd.services.nginx = { |
36 | preStart = lib.mkForce config.services.nginx.preStart; | 36 | preStart = lib.mkForce config.services.nginx.preStart; |
37 | serviceConfig = { | 37 | serviceConfig = { |
38 | SupplementaryGroups = [ "shadow" ]; | ||
39 | ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; | 38 | ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; |
40 | RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; | 39 | RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; |
41 | RuntimeDirectoryMode = "0750"; | 40 | RuntimeDirectoryMode = "0750"; |