From c38a2cfd7ae492a94396bbca639d7ee4fc992898 Mon Sep 17 00:00:00 2001
From: Brendan Golden <git_laptop@brendan.ie>
Date: Fri, 21 Apr 2023 01:10:30 +0100
Subject: [PATCH] nginx: basic setup complete (copied from my own stuff)

---
 applications/nginx.nix | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 applications/nginx.nix

diff --git a/applications/nginx.nix b/applications/nginx.nix
new file mode 100644
index 0000000..d2524fc
--- /dev/null
+++ b/applications/nginx.nix
@@ -0,0 +1,20 @@
+# using K900's one https://gitlab.com/K900/nix/-/blob/a69502b8bf39fd99a85342b2f7989fe5896a6ae0/applications/base/nginx.nix
+
+{pkgs, ...}: {
+  services.nginx = {
+    enable = true;
+    package = pkgs.nginxMainline;
+
+    recommendedOptimisation = true;
+    recommendedTlsSettings = true;
+    recommendedGzipSettings = true;
+    recommendedProxySettings = true;
+
+    statusPage = true;
+
+    # give Nginx access to our certs
+    group = "acme";
+  };
+
+  networking.firewall.allowedTCPPorts = [80 443];
+}