omniflake/system/web-server/default.nix

21 lines
360 B
Nix

{ config, pkgs, ... }:
{
nixpkgs.config.allowUnfree = true;
networking.firewall.allowedTCPPorts = [ 80 443 ];
services.jenkins.enable = true;
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
};
security.acme = {
acceptTerms = true;
defaults.email = "till@ktiu.net";
};
}