infrastructure

commit ca533fa00729dcadd46b0d224471f59b2c8c08a1
parent 1f04892e4e967c4b03569636dcade4822a222e30
Author: Silas Brack <silasbrack@gmail.com>
Date:   Fri,  3 Apr 2026 18:53:57 +0200

fix: recommended nginx settings, gzip, redirect html files, etc

Diffstat:
M
nixos/configuration-debian-2gb-hel1-1.nix
 | 
7
++++++-

1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/nixos/configuration-debian-2gb-hel1-1.nix b/nixos/configuration-debian-2gb-hel1-1.nix
@@ -120,6 +120,11 @@
     defaults.email = "silasbrack@gmail.com";
   };
   services.nginx.enable = true;
+  services.nginx.recommendedGzipSettings = true;
+  services.nginx.recommendedBrotliSettings = true; # Better compression than gzip for modern browsers
+  services.nginx.recommendedOptimisation = true;   # sendfile, tcp_nopush, tcp_nodelay, keepalive
+  services.nginx.recommendedTlsSettings = true;    # Strong TLS defaults
+  services.nginx.recommendedProxySettings = true;  # Good defaults for proxied services (Forgejo)
 
   # Rate limiting zone (10 requests/second per IP, 10MB zone)
   services.nginx.commonHttpConfig = ''
@@ -222,7 +227,7 @@
       alias = "${staticSite}/";
       index = "index.html";
       extraConfig = ''
-        try_files $uri $uri/ /blog/index.html;
+        try_files $uri $uri.html $uri/ /blog/index.html;
       '';
     };
     locations."= /blog" = {