Hosting more stuff. cleaning nginx

This commit is contained in:
Dustin Swan 2026-03-16 03:42:01 +00:00
parent 8f0db0ff00
commit 033d869951

View file

@ -1,4 +1,14 @@
{ pkgs, modulesPath, ... }: { { pkgs, modulesPath, ... }:
let
withGitBlock = {
extraConfig = ''
location ~ /\.git {
deny all;
}
'';
};
in
{
imports = [ (modulesPath + "/installer/scan/not-detected.nix") imports = [ (modulesPath + "/installer/scan/not-detected.nix")
(modulesPath + "/profiles/qemu-guest.nix") ]; (modulesPath + "/profiles/qemu-guest.nix") ];
@ -31,18 +41,25 @@
recommendedTlsSettings = true; recommendedTlsSettings = true;
clientMaxBodySize = "500m"; clientMaxBodySize = "500m";
virtualHosts = { virtualHosts = {
"dustinswan.com" = { "dustinswan.com" = withGitBlock // {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
serverAliases = [ "www.dustinswan.com" ]; serverAliases = [ "www.dustinswan.com" ];
root = "/var/www/dustinswan.com"; root = "/var/www/dustinswan.com";
extraConfig = ''
location ~ /\.git {
deny all;
}
'';
}; };
"git.dustinswan.com" = { "resume.dustinswan.com" = withGitBlock // {
forceSSL = true;
enableACME = true;
# serverAliases = [ "www.dustinswan.com" ];
root = "/var/www/resume.dustinswan.com";
};
"swanlabs.org" = withGitBlock // {
forceSSL = true;
enableACME = true;
serverAliases = [ "www.swanlabs.org" ];
globalRedirect = "dustinswan.com";
};
"git.dustinswan.com" = withGitBlock // {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {