diff --git a/modules/core/nginx.nix b/modules/core/nginx.nix index 477663c..36e596e 100644 --- a/modules/core/nginx.nix +++ b/modules/core/nginx.nix @@ -7,10 +7,14 @@ ({ name, ... }: { enableACME = true; forceSSL = true; + # enable http3 for all hosts + quic = true; + http3 = true; # split up nginx access logs per vhost extraConfig = '' access_log /var/log/nginx/${name}_access.log; error_log /var/log/nginx/${name}_error.log; + add_header Alt-Svc 'h3=":443"; ma=86400'; ''; }) ); @@ -22,6 +26,7 @@ networking.firewall.allowedUDPPorts = [ 443 ]; services.nginx = { enable = true; + package = pkgs.nginxQuic; additionalModules = [ pkgs.nginxModules.pam ]; recommendedProxySettings = true; recommendedGzipSettings = true; diff --git a/modules/web/fsrewsp.nix b/modules/web/fsrewsp.nix index 57ad6bb..f8f0799 100644 --- a/modules/web/fsrewsp.nix +++ b/modules/web/fsrewsp.nix @@ -43,6 +43,7 @@ in root = "/srv/web/fsrewsp"; extraConfig = '' index index.php index.html; + fastcgi_param HTTP_HOST $host; ''; locations = { diff --git a/modules/web/nightline.nix b/modules/web/nightline.nix index 9cff390..0e264a4 100644 --- a/modules/web/nightline.nix +++ b/modules/web/nightline.nix @@ -40,6 +40,7 @@ in root = "/srv/web/nightline"; extraConfig = '' index index.php index.html; + fastcgi_param HTTP_HOST $host; ''; locations = {