diff options
Diffstat (limited to 'hosts/surtr/default.nix')
| -rw-r--r-- | hosts/surtr/default.nix | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix index add50653..7ab3199b 100644 --- a/hosts/surtr/default.nix +++ b/hosts/surtr/default.nix | |||
| @@ -2,7 +2,7 @@ | |||
| 2 | { | 2 | { |
| 3 | imports = with flake.nixosModules.systemProfiles; [ | 3 | imports = with flake.nixosModules.systemProfiles; [ |
| 4 | qemu-guest openssh rebuild-machines zfs | 4 | qemu-guest openssh rebuild-machines zfs |
| 5 | ./zfs.nix ./dns ./tls ./http.nix ./bifrost | 5 | ./zfs.nix ./dns ./tls ./http.nix ./bifrost ./matrix.nix ./postgres.nix |
| 6 | ]; | 6 | ]; |
| 7 | 7 | ||
| 8 | config = { | 8 | config = { |
| @@ -139,5 +139,15 @@ | |||
| 139 | automatic = true; | 139 | automatic = true; |
| 140 | options = "--delete-older-than 30d"; | 140 | options = "--delete-older-than 30d"; |
| 141 | }; | 141 | }; |
| 142 | |||
| 143 | security.dhparams = { | ||
| 144 | enable = true; | ||
| 145 | defaultBitSize = 4096; | ||
| 146 | params = { | ||
| 147 | nginx = {}; | ||
| 148 | matrix-synapse = {}; | ||
| 149 | }; | ||
| 150 | stateful = true; | ||
| 151 | }; | ||
| 142 | }; | 152 | }; |
| 143 | } | 153 | } |
