From bfd6be344742af5ae9247145e1093c8227fc874e Mon Sep 17 00:00:00 2001
From: Mike Vink <mike1994vink@gmail.com>
Date: Fri, 20 Oct 2023 17:52:30 +0200
Subject: add nginx

---
 profiles/server/acme.nix  |  2 +-
 profiles/server/mail.nix  |  2 ++
 profiles/server/nginx.nix | 12 ++++++++++--
 3 files changed, 13 insertions(+), 3 deletions(-)

(limited to 'profiles/server')

diff --git a/profiles/server/acme.nix b/profiles/server/acme.nix
index c0d7306..25303a6 100644
--- a/profiles/server/acme.nix
+++ b/profiles/server/acme.nix
@@ -1,4 +1,4 @@
-{ config, ... }: {
+{ config, lib, ... }: with lib; {
   security.acme = {
     acceptTerms = true;
     defaults = {
diff --git a/profiles/server/mail.nix b/profiles/server/mail.nix
index c6837ef..291e764 100644
--- a/profiles/server/mail.nix
+++ b/profiles/server/mail.nix
@@ -2,12 +2,14 @@
   imports = [
     inputs.simple-nixos-mailserver.nixosModule
   ];
+
   mailserver = {
     enable = true;
     enableImap = false;
     enableSubmission = true;
     enableImapSsl = true;
     enableSubmissionSsl = true;
+    # TODO: configurate a local dns server?
 
     fqdn = ivi.domain;
     domains = [ ivi.domain ];
diff --git a/profiles/server/nginx.nix b/profiles/server/nginx.nix
index 526a8e7..ab308b4 100644
--- a/profiles/server/nginx.nix
+++ b/profiles/server/nginx.nix
@@ -9,8 +9,16 @@
     }));
   };
   config = {
-      services.nginx = {
-          enable = true;
+    services.nginx = {
+      enable = true;
+      enableReload = true;
+      recommendedTlsSettings = true;
+      recommendedProxySettings = true;
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+
+      virtualHosts."${ivi.domain}" = {
       };
+    };
   };
 }
-- 
cgit v1.2.3