From 0bcabe1c4b1dd74af233674dfa6c6ec3011ce2c0 Mon Sep 17 00:00:00 2001
From: stuebinm
Date: Tue, 18 Jan 2022 09:43:24 +0100
Subject: restructuring directories

---
 flora/services/nginx.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 flora/services/nginx.nix

(limited to 'flora/services/nginx.nix')

diff --git a/flora/services/nginx.nix b/flora/services/nginx.nix
new file mode 100644
index 0000000..bbcacb7
--- /dev/null
+++ b/flora/services/nginx.nix
@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+{
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  services.nginx = {
+    enable = true;
+    
+    recommendedOptimisation = true;
+    recommendedTlsSettings = true;
+    recommendedProxySettings = true;
+
+    appendHttpConfig = ''
+      add_header Permissions-Policy "interest-cohort=()";
+    '';
+  };
+}
-- 
cgit v1.2.3