1 files changed, 55 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index bf8c29fb..2df8f902 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -164,4 +164,59 @@ in {
       ip4 = [ { address = "10.142.0.3"; prefixLength = 16; } ];
     };
     });
+
+  services.nginx = {
+    enable = true;
+    httpConfig = ''
+      include mime.types;
+      default_type application/octet-stream;
+ 
+      log_format main
+              '$remote_addr - $remote_user [$time_local] '
+              '"$request" $status $bytes_sent '
+              '"$http_referer" "$http_user_agent" '
+              '"$gzip_ratio"';
+
+      client_header_timeout 10m;
+      client_body_timeout 10m;
+      send_timeout 10m;
+
+      connection_pool_size 256;
+      client_header_buffer_size 1k;
+      large_client_header_buffers 4 2k;
+      request_pool_size 4k;
+
+      gzip on;
+      gzip_min_length 1100;
+      gzip_buffers 4 8k;
+      gzip_types text/plain;
+
+      output_buffers 1 32k;
+      postpone_output 1460;
+
+      sendfile on;
+      tcp_nopush on;
+      tcp_nodelay on;
+
+      keepalive_timeout 75 20;
+
+      ignore_invalid_headers on;
+
+      include hosts/*.conf;
+    '';
+  };
+  environment.etc."etc/nginx/mime.types" = {
+    source = ./custom/mime.types;
+  };
+  environment.etc."etc/nginx/hosts/dirty-haskell.conf" = {
+    text = ''
+      server {
+                         listen *:80;
+                         listen [::]:80;
+                         server_name dirty-haskell.org www.dirty-haskell.org;
+
+                         root /srv/www/dirty-haskell.org;
+      }
+    '';
+  };
 }