diff options
Diffstat (limited to 'hosts/surtr/http/default.nix')
| -rw-r--r-- | hosts/surtr/http/default.nix | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/hosts/surtr/http/default.nix b/hosts/surtr/http/default.nix index c70eb8f8..f3a7154e 100644 --- a/hosts/surtr/http/default.nix +++ b/hosts/surtr/http/default.nix | |||
| @@ -8,7 +8,7 @@ | |||
| 8 | services.nginx = { | 8 | services.nginx = { |
| 9 | enable = true; | 9 | enable = true; |
| 10 | package = pkgs.nginxQuic; | 10 | package = pkgs.nginxQuic; |
| 11 | recommendedGzipSettings = true; | 11 | recommendedGzipSettings = false; |
| 12 | recommendedProxySettings = true; | 12 | recommendedProxySettings = true; |
| 13 | recommendedTlsSettings = true; | 13 | recommendedTlsSettings = true; |
| 14 | sslDhparam = config.security.dhparams.params.nginx.path; | 14 | sslDhparam = config.security.dhparams.params.nginx.path; |
| @@ -35,7 +35,6 @@ | |||
| 35 | systemd.services.nginx = { | 35 | systemd.services.nginx = { |
| 36 | preStart = lib.mkForce config.services.nginx.preStart; | 36 | preStart = lib.mkForce config.services.nginx.preStart; |
| 37 | serviceConfig = { | 37 | serviceConfig = { |
| 38 | SupplementaryGroups = [ "shadow" ]; | ||
| 39 | ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; | 38 | ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; |
| 40 | RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; | 39 | RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; |
| 41 | RuntimeDirectoryMode = "0750"; | 40 | RuntimeDirectoryMode = "0750"; |
