diff options
Diffstat (limited to 'modules/services')
| -rw-r--r-- | modules/services/nginx.nix | 46 | ||||
| -rw-r--r-- | modules/services/sunshine.nix | 18 |
2 files changed, 30 insertions, 34 deletions
diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix index 6ad4c0f..73ed594 100644 --- a/modules/services/nginx.nix +++ b/modules/services/nginx.nix @@ -1,27 +1,25 @@ { - flake.modules.nixos.nginx = - { ... }: - { - services.nginx = { - enable = true; - recommendedGzipSettings = true; - recommendedOptimisation = true; - recommendedProxySettings = true; - recommendedTlsSettings = true; - appendHttpConfig = '' - map $scheme $hsts_header { - https "max-age=31536000; includeSubdomains; preload"; - } - add_header Strict-Transport-Security $hsts_header; - #add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self';" always; - add_header 'Referrer-Policy' 'same-origin'; - add_header X-Frame-Options DENY; - add_header X-Content-Type-Options nosniff; - ''; - }; - networking.firewall.allowedTCPPorts = [ - 80 - 443 - ]; + flake.modules.nixos.nginx = { + services.nginx = { + enable = true; + recommendedGzipSettings = true; + recommendedOptimisation = true; + recommendedProxySettings = true; + recommendedTlsSettings = true; + appendHttpConfig = '' + map $scheme $hsts_header { + https "max-age=31536000; includeSubdomains; preload"; + } + add_header Strict-Transport-Security $hsts_header; + #add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self';" always; + add_header 'Referrer-Policy' 'same-origin'; + add_header X-Frame-Options DENY; + add_header X-Content-Type-Options nosniff; + ''; }; + networking.firewall.allowedTCPPorts = [ + 80 + 443 + ]; + }; } diff --git a/modules/services/sunshine.nix b/modules/services/sunshine.nix index 69496f2..510de8a 100644 --- a/modules/services/sunshine.nix +++ b/modules/services/sunshine.nix @@ -1,13 +1,11 @@ { - flake.modules.nixos.sunshine = - { ... }: - { - services.sunshine = { - enable = true; - autoStart = true; - capSysAdmin = true; - openFirewall = true; - }; - hardware.graphics.enable = true; + flake.modules.nixos.sunshine = { + services.sunshine = { + enable = true; + autoStart = true; + capSysAdmin = true; + openFirewall = true; }; + hardware.graphics.enable = true; + }; } |
