summary refs log tree commit diff
diff options
context:
space:
mode:
authorRory&::Emma <root@rory.gay>2023-06-28 09:07:14 +0000
committerRory&::Emma <root@rory.gay>2023-06-28 09:07:14 +0000
commit7ea5886121675f5f57d75c0479799388bef56782 (patch)
tree84e03bcafd818ba2768c5dd999bf906f83c47517
parentUpdate db location for synapse (diff)
downloadRory-Open-Architecture-7ea5886121675f5f57d75c0479799388bef56782.tar.xz
Update deployed state
Diffstat (limited to '')
-rwxr-xr-xhost/Rory-nginx/hosts/rory.gay/mru.nix8
-rwxr-xr-xhost/Rory-nginx/software.nix9
2 files changed, 16 insertions, 1 deletions
diff --git a/host/Rory-nginx/hosts/rory.gay/mru.nix b/host/Rory-nginx/hosts/rory.gay/mru.nix
index 70c0db3..47aa1e5 100755
--- a/host/Rory-nginx/hosts/rory.gay/mru.nix
+++ b/host/Rory-nginx/hosts/rory.gay/mru.nix
@@ -1,7 +1,15 @@
 {
   enableACME = true;
   addSSL = true;
+  quic = true;
+  http3 = true;
+  http3_hq = true;
+  kTLS = true;
   root = "/data/nginx/html_mru";
+  reuseport = true;
+  extraConfig = ''
+    brotli off;
+    '';
   locations = {
     "/" = {
       index = "index.html";
diff --git a/host/Rory-nginx/software.nix b/host/Rory-nginx/software.nix
index 8aa07bf..6423c08 100755
--- a/host/Rory-nginx/software.nix
+++ b/host/Rory-nginx/software.nix
@@ -13,6 +13,10 @@
       package = pkgs.nginxQuic;
       recommendedProxySettings = true;
       recommendedTlsSettings = true;
+      recommendedZstdSettings = true;
+      recommendedGzipSettings = true;
+      recommendedBrotliSettings = true;
+      recommendedOptimisation = true;
       defaultMimeTypes = ../../modules/packages/nginx/mime.types;
       appendConfig = ''
         worker_processes 16;
@@ -22,9 +26,12 @@
         worker_connections 512;
         '';
       appendHttpConfig = ''
-        sendfile on;
+        #sendfile on;
       '';
       upstreams = import ./matrix/upstreams.nix;
+      additionalModules = with pkgs.nginxModules; [
+        moreheaders
+      ];
       virtualHosts = {
         "siliconheaven.thearcanebrony.net" = import ./hosts/thearcanebrony.net/siliconheaven.nix;
         "lfs.thearcanebrony.net" = import ./hosts/thearcanebrony.net/lfs.nix;