modules/nixos/personal/services/nginx.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ config, lib, ... }:
{
  services.nginx = {
    # recommended settings
    recommendedBrotliSettings = lib.mkDefault true;
    recommendedGzipSettings = lib.mkDefault true;
    recommendedOptimisation = lib.mkDefault true;
    recommendedProxySettings = lib.mkDefault true;
    recommendedTlsSettings = lib.mkDefault true;
    recommendedUwsgiSettings = lib.mkDefault config.services.uwsgi.enable;

    # return 444 when trying to connect to some unknown virtual host
    virtualHosts."_" = {
      default = true;
      extraConfig = ''
        return 444;
      '';
    };

  };
}