summaryrefslogtreecommitdiff
path: root/ymir.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2015-11-07 21:30:46 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2015-11-07 21:30:46 +0100
commite5899248bf45759565eb0bc2888dcedb3a6a63e8 (patch)
treef4c324e4f75c3c0710cb104a62090b3e04155cbe /ymir.nix
parent8ac4624d37b736913ff8368aadbc61cc362cb2a1 (diff)
downloadnixos-e5899248bf45759565eb0bc2888dcedb3a6a63e8.tar
nixos-e5899248bf45759565eb0bc2888dcedb3a6a63e8.tar.gz
nixos-e5899248bf45759565eb0bc2888dcedb3a6a63e8.tar.bz2
nixos-e5899248bf45759565eb0bc2888dcedb3a6a63e8.tar.xz
nixos-e5899248bf45759565eb0bc2888dcedb3a6a63e8.zip
moved nginx config
Diffstat (limited to 'ymir.nix')
-rw-r--r--ymir.nix63
1 files changed, 1 insertions, 62 deletions
diff --git a/ymir.nix b/ymir.nix
index 52b6e476..808b11bb 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -167,67 +167,6 @@ in {
167 167
168 services.nginx = { 168 services.nginx = {
169 enable = true; 169 enable = true;
170 httpConfig = '' 170 httpConfig = builtins.readFile ./custom/ymir.nginx;
171 default_type application/octet-stream;
172
173 log_format main
174 '$remote_addr - $remote_user [$time_local] '
175 '"$request" $status $bytes_sent '
176 '"$http_referer" "$http_user_agent" '
177 '"$gzip_ratio"';
178
179 client_header_timeout 10m;
180 client_body_timeout 10m;
181 send_timeout 10m;
182
183 connection_pool_size 256;
184 client_header_buffer_size 1k;
185 large_client_header_buffers 4 2k;
186 request_pool_size 4k;
187
188 gzip on;
189 gzip_min_length 1100;
190 gzip_buffers 4 8k;
191 gzip_types text/plain;
192
193 output_buffers 1 32k;
194 postpone_output 1460;
195
196 sendfile on;
197 tcp_nopush on;
198 tcp_nodelay on;
199
200 keepalive_timeout 75 20;
201
202 ignore_invalid_headers on;
203
204 server {
205 listen *:80;
206 listen [::]:80;
207 server_name dirty-haskell.org www.dirty-haskell.org;
208
209 root /srv/www/dirty-haskell.org;
210 }
211 server {
212 listen *:443 ssl;
213 listen [::]:443 ssl;
214 server_name dirty-haskell.org;
215
216 ssl_certificate /etc/nginx/ssl/dirty-haskell.org/fullchain.pem;
217 ssl_certificate_key /etc/nginx/ssl/dirty-haskell.org/privkey.pem;
218
219 root /srv/www/dirty-haskell.org;
220 }
221 server {
222 listen *:443 ssl;
223 listen [::]:443 ssl;
224 server_name www.dirty-haskell.org;
225
226 ssl_certificate /etc/nginx/ssl/www.dirty-haskell.org/fullchain.pem;
227 ssl_certificate_key /etc/nginx/ssl/www.dirty-haskell.org/privkey.pem;
228
229 root /srv/www/dirty-haskell.org;
230 }
231 '';
232 }; 171 };
233} 172}