diff --git a/config/hosts/web-public-2/nginx.nix b/config/hosts/web-public-2/nginx.nix index 52acd48..82c4b8f 100644 --- a/config/hosts/web-public-2/nginx.nix +++ b/config/hosts/web-public-2/nginx.nix @@ -7,6 +7,10 @@ services.nginx = { enable = true; + eventsConfig = '' + worker_connections 1024; + ''; + streamConfig = '' map $ssl_preread_server_name $address { anisync.grzb.de 127.0.0.1:8443; @@ -33,6 +37,10 @@ } ''; + appendConfig = '' + worker_processes auto; + ''; + appendHttpConfig = '' add_header Strict-Transport-Security "max-age=63072000" always; '';