treewide: nginx optimizations

2025-12-10 04:27:14 +01:00 · 2024-04-10 22:01:19 +02:00
parent e22c7d5b4d
commit 065992620e
14 changed files with 42 additions and 57 deletions
--- a/hosts/bicep/services/matrix/element.nix
+++ b/hosts/bicep/services/matrix/element.nix
@@ -5,6 +5,7 @@ in {
  services.nginx.virtualHosts."chat.pvv.ntnu.no" = {
    enableACME = true;
    forceSSL = true;
+    kTLS = true;

    root = pkgs.element-web.override {
      conf = {
--- a/hosts/bicep/services/matrix/synapse.nix
+++ b/hosts/bicep/services/matrix/synapse.nix
@@ -217,6 +217,9 @@ in {
  services.redis.servers."".enable = true;
  
  services.nginx.virtualHosts."matrix.pvv.ntnu.no" = lib.mkMerge [
+  ({
+    kTLS = true;
+  })
  ({
    locations."/.well-known/matrix/server" = {
      return = ''