makefu/stockholm
1
0
Fork 0
Code Issues Pull requests Actions 1 Packages Projects Releases Wiki Activity

l 2 websites: enable ipv6 on all sites

Browse source
This commit is contained in:
lassulus 2017-02-09 15:32:37 +01:00
parent 954477b867
commit 920436365a
2 changed files with 15 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
lass/2configs/websites/lassulus.nix
View file

@ -110,7 +110,10 @@ in {
''; '';
enableSSL = true; enableSSL = true;
extraConfig = "listen 80;"; extraConfig = ''
listen 80;
listen [::]:80;
'';
sslCertificate = "/var/lib/acme/lassul.us/fullchain.pem"; sslCertificate = "/var/lib/acme/lassul.us/fullchain.pem";
sslCertificateKey = "/var/lib/acme/lassul.us/key.pem"; sslCertificateKey = "/var/lib/acme/lassul.us/key.pem";
}; };
@ -123,7 +126,10 @@ in {
root /var/lib/acme/acme-challenges; root /var/lib/acme/acme-challenges;
''; '';
enableSSL = true; enableSSL = true;
extraConfig = "listen 80;"; extraConfig = ''
listen 80;
listen [::]:80;
'';
sslCertificate = "/var/lib/acme/cgit.lassul.us/fullchain.pem"; sslCertificate = "/var/lib/acme/cgit.lassul.us/fullchain.pem";
sslCertificateKey = "/var/lib/acme/cgit.lassul.us/key.pem"; sslCertificateKey = "/var/lib/acme/cgit.lassul.us/key.pem";
}; };

8
lass/2configs/websites/util.nix
View file

@ -17,7 +17,10 @@ rec {
services.nginx.virtualHosts.${domain} = { services.nginx.virtualHosts.${domain} = {
enableACME = true; enableACME = true;
enableSSL = true; enableSSL = true;
extraConfig = "listen 80;"; extraConfig = ''
listen 80;
listen [::]:80;
'';
serverAliases = domains; serverAliases = domains;
locations."/".extraConfig = '' locations."/".extraConfig = ''
root /srv/http/${domain}; root /srv/http/${domain};
@ -35,6 +38,7 @@ rec {
serverAliases = domains; serverAliases = domains;
extraConfig = '' extraConfig = ''
listen 80; listen 80;
listen [::]:80;
# Add headers to serve security related headers # Add headers to serve security related headers
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
@ -148,6 +152,8 @@ rec {
serverAliases = domains; serverAliases = domains;
extraConfig = '' extraConfig = ''
listen 80; listen 80;
listen [::]:80;
root /srv/http/${domain}/; root /srv/http/${domain}/;
index index.php; index index.php;
access_log /tmp/nginx_acc.log; access_log /tmp/nginx_acc.log;