summaryrefslogtreecommitdiff
path: root/hosts/surtr/http/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/surtr/http/default.nix')
-rw-r--r--hosts/surtr/http/default.nix3
1 files changed, 1 insertions, 2 deletions
diff --git a/hosts/surtr/http/default.nix b/hosts/surtr/http/default.nix
index c70eb8f8..f3a7154e 100644
--- a/hosts/surtr/http/default.nix
+++ b/hosts/surtr/http/default.nix
@@ -8,7 +8,7 @@
8 services.nginx = { 8 services.nginx = {
9 enable = true; 9 enable = true;
10 package = pkgs.nginxQuic; 10 package = pkgs.nginxQuic;
11 recommendedGzipSettings = true; 11 recommendedGzipSettings = false;
12 recommendedProxySettings = true; 12 recommendedProxySettings = true;
13 recommendedTlsSettings = true; 13 recommendedTlsSettings = true;
14 sslDhparam = config.security.dhparams.params.nginx.path; 14 sslDhparam = config.security.dhparams.params.nginx.path;
@@ -35,7 +35,6 @@
35 systemd.services.nginx = { 35 systemd.services.nginx = {
36 preStart = lib.mkForce config.services.nginx.preStart; 36 preStart = lib.mkForce config.services.nginx.preStart;
37 serviceConfig = { 37 serviceConfig = {
38 SupplementaryGroups = [ "shadow" ];
39 ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; 38 ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
40 RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ]; 39 RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" "nginx-proxy-bodies" ];
41 RuntimeDirectoryMode = "0750"; 40 RuntimeDirectoryMode = "0750";