Add nginx recommended settings

strykeforce · Feb 8, 2025 · 6db8a7f · 6db8a7f
1 parent 95de7c4
commit 6db8a7f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/nix/modules/nixos/strykeforce-website.nix b/nix/modules/nixos/strykeforce-website.nix
@@ -126,6 +126,9 @@ in
 
     services.nginx = {
       enable = true;
+      recommendedBrotliSettings = true;
+      recommendedTlsSettings = true;
+      recommendedZstdSettings = true;
       recommendedProxySettings = true;
       recommendedOptimisation = true;
       recommendedGzipSettings = true;
@@ -155,6 +158,11 @@ in
       };
     };
 
+    networking.firewall.allowedTCPPorts = [
+      443
+      80
+    ];
+
     security.acme.certs = lib.mkIf cfg.ssl {
       "www.strykeforce.org".email = "[email protected]";
     };