kopatz/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update kavita service

Browse Source
This commit is contained in:
Kopatz
2024-04-10 09:59:49 +02:00
parent e66074e3e6
commit 6a61ef27a0
2 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
modules/services/kavita.nix
View File

@@ -26,6 +26,7 @@ in
#todo: base url needs new kavita version
systemd.services.kavita = {
after = [ "nginx.service" "step-ca.service" ];
preStart = ''
umask u=rwx,g=rx,o=
cat > "/mnt/1tbssd/kavita/config/appsettings.json" <<EOF

13
modules/services/nginx.nix
View File

@@ -11,6 +11,7 @@
services.nginx = {
enable = true;
package = pkgs.nginxQuic;
#additionalModules = [ pkgs.nginxModules.moreheaders ];
# Use recommended settings
recommendedGzipSettings = true;
@@ -19,7 +20,15 @@
recommendedTlsSettings = true;
# Only allow PFS-enabled ciphers with AES256
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
#appendConfig= ''
# more_set_headers 'Strict-Transport-Security: max-age=31536000; includeSubDomains';
# more_set_headers 'X-XSS-Protection 1; mode=block';
# more_set_headers 'X-Frame-Options SAMEORIGIN';
# more_set_headers 'X-Content-Type-Options nosniff';
# more_set_headers "Content-Security-Policy default-src 'self'; font-src *;";
#'';
# Setup Nextcloud virtual host to listen on ports
virtualHosts = {
@@ -35,7 +44,7 @@
enableACME = true;
quic = true;
http3 = true;
locations."~* \\.(jpg|png)$".extraConfig= ''
locations."~* \\.(jpg|png)$".extraConfig= ''
add_header Access-Control-Allow-Origin *;
'';
locations."~ ^/(stash|resources|css)".extraConfig=''