From 70123785d67884852e655f23acf3598ab49b7ea7 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Sat, 23 Dec 2023 17:30:04 +0100
Subject: [PATCH] nginx: enable http3 for falkenstein

---
 hosts/falkenstein/modules/nginx/default.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/hosts/falkenstein/modules/nginx/default.nix b/hosts/falkenstein/modules/nginx/default.nix
index 96095a1..23ee74a 100644
--- a/hosts/falkenstein/modules/nginx/default.nix
+++ b/hosts/falkenstein/modules/nginx/default.nix
@@ -5,6 +5,9 @@
     services.nginx.virtualHosts = mkOption {
       type = types.attrsOf (types.submodule
         ({ name, ... }: {
+          # enable http3 for all hosts
+          quic = true;
+          http3 = true;
           # split up nginx access logs per vhost
           extraConfig = ''
             access_log /var/log/nginx/${name}_access.log;
@@ -71,8 +74,6 @@
         recommendedGzipSettings = true;
         recommendedOptimisation = true;
         virtualHosts."${config.networking.domain}" = {
-          quic = true;
-          http3 = true;
           enableACME = true;
           forceSSL = true;
           root = "/srv/web/${config.networking.domain}";