nginx: enable http3

This commit is contained in:
emily 2024-11-04 18:51:13 +01:00
parent 03c32f38d0
commit 98f4b06cf8
Signed by: emily
GPG key ID: F6F4C66207FCF995
2 changed files with 6 additions and 4 deletions

View file

@ -1,4 +1,6 @@
{ config, lib, ... }: with lib; { { config, lib, pkgs, ... }: let
inherit (lib) mkDefault;
in {
kyouma.deployment.tags = [ "web" ]; kyouma.deployment.tags = [ "web" ];
security.dhparams.enable = true; security.dhparams.enable = true;
security.dhparams.params.nginx = {}; security.dhparams.params.nginx = {};
@ -11,7 +13,7 @@
}; };
services.nginx = { services.nginx = {
enable = true; enable = true;
#package = pkgs.nginxQuic; package = pkgs.nginxQuic;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;

View file

@ -12,8 +12,8 @@
extraConfig = (lib.optionalString (builtins.hasAttr "extraConfig" vhostCfg) vhostCfg.extraConfig) + "\n" + extraConfig; extraConfig = (lib.optionalString (builtins.hasAttr "extraConfig" vhostCfg) vhostCfg.extraConfig) + "\n" + extraConfig;
forceSSL = true; forceSSL = true;
#kTLS = true; #kTLS = true;
#http3 = true; http3 = true;
#quic = true; quic = true;
} // } //
lib.optionalAttrs (!(builtins.hasAttr "useACMEHost" vhostCfg)) { lib.optionalAttrs (!(builtins.hasAttr "useACMEHost" vhostCfg)) {
enableACME = true; enableACME = true;