refactor: Don't do pointless indirection when importing modules

refactor: Move service imports into a default.nix
fix: Make the default package disabling actually work
2025-11-20 11:02:11 +08:00 · 2025-11-20 11:02:10 +08:00 · 2025-11-20 11:02:10 +08:00 · 2025-11-20 11:02:10 +08:00 · 2025-11-20 11:02:10 +08:00 · 2025-11-20 11:02:10 +08:00
1 changed files with 2 additions and 4 deletions
--- a/configuration/nginx/ssl.nix
+++ b/configuration/nginx/ssl.nix
@ -81,10 +81,7 @@
              ../../modules/serviceTests/mocks.nix
            ];

-            networking.firewall.allowedTCPPorts = [
-              80
-              443
-            ];
+            networking.firewall.allowedTCPPorts = [ 443 ];

            security.acme.certs."tlater.net".extraDomainNames = [ config.services.nginx.domain ];

@ -93,6 +90,7 @@

              virtualHosts."${config.services.nginx.domain}" = {
                useACMEHost = "tlater.net";
+                onlySSL = true;
                enableHSTS = true;
                locations."/".return = "200 ok";
              };
Author	SHA1	Message	Date
Tristan Daniël Maat	d950c1fa23	refactor: Don't do pointless indirection when importing modules	2025-11-20 11:02:11 +08:00
Tristan Daniël Maat	5e488337b4	refactor: Move service imports into a `default.nix`	2025-11-20 11:02:10 +08:00
Tristan Daniël Maat	54a12223ea	fix: Make the default package disabling actually work	2025-11-20 11:02:10 +08:00
Tristan Daniël Maat	eef7f004b3	chore: Disable hack for Minecraft optimization on VPS	2025-11-20 11:02:10 +08:00
Tristan Daniël Maat	86a8df5004	refactor(firewall): Make services responsible for opening ports	2025-11-20 11:02:10 +08:00
Tristan Daniël Maat	f2ef91672b	test(nginx): Add simple tests to assert nginx features work	2025-11-20 11:02:10 +08:00