foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-03-13 18:19:00 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

hosts/plover: add default server to reverse proxy

Browse Source
This commit is contained in:
Gabriel Arazas 2023-01-17 12:48:57 +08:00
parent 6d9c43bafa
commit 002b65250c
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
hosts/plover/modules/services/nginx.nix
View File

@ -15,6 +15,18 @@
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
# We're avoiding any service to be the default server especially that it
# could be used for enter a service with unencrypted HTTP. So we're setting
# up one with an unresponsive server response.
appendHttpConfig = ''
server {
listen 0.0.0.0:80 default_server;
listen [::]:80 default_server;
server_name "";
return 418;
}
'';
};
# Some fail2ban policies to apply for nginx.