diff options
Diffstat (limited to 'hosts/surtr/http/default.nix')
-rw-r--r-- | hosts/surtr/http/default.nix | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/hosts/surtr/http/default.nix b/hosts/surtr/http/default.nix index c70eb8f8..f3a7154e 100644 --- a/hosts/surtr/http/default.nix +++ b/hosts/surtr/http/default.nix | |||
@@ -8,7 +8,7 @@ | |||
8 | services.nginx = { | 8 | services.nginx = { |
9 | enable = true; | 9 | enable = true; |
10 | package = pkgs.nginxQuic; | 10 | package = pkgs.nginxQuic; |
11 | recommendedGzipSettings = true; | 11 | recommendedGzipSettings = false; |
12 | recommendedProxySettings = true; | 12 | recommendedProxySettings = true; |
13 | recommendedTlsSettings = true; | 13 | recommendedTlsSettings = true; |
14 | sslDhparam = config.security.dhparams.params.nginx.path; | 14 | sslDhparam = config.security.dhparams.params.nginx.path; |
@@ -35,7 +35,6 @@ | |||
35 | systemd.services.nginx = { | 35 | systemd.services.nginx = { |
36 | preStart = lib.mkForce config.services.nginx.preStart; | 36 | preStart = lib.mkForce config.services.nginx.preStart; |
37 | serviceConfig = { | 37 | serviceConfig = { |
38 | SupplementaryGroups = [ "shadow" ]; | ||
39 | ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; | 38 | ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; |
40 | RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; | 39 | RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; |
41 | RuntimeDirectoryMode = "0750"; | 40 | RuntimeDirectoryMode = "0750"; |