stockholm/tv/2configs/nginx/default.nix

{ config, lib, ... }:

with import <stockholm/lib>;

{
  services.nginx = {
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedTlsSettings = true;

    virtualHosts._http = {
      default = true;
      extraConfig = ''
        return 404;
      '';
    };

    virtualHosts.default = {
      locations."= /etc/os-release".extraConfig = ''
        default_type text/plain;
        alias /etc/os-release;
      '';
    };
  };
  tv.iptables = {
    input-retiolum-accept-tcp = singleton "http";
  };
}