-
Ciphers to choose from when negotiating TLS handshakes.
Type
null or string
Default
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"
Example
-
Whether to enable Global rate limiting.
Type
boolean
Default
false
Example
true
-
Whether to enable FC-customized nginx.
Type
boolean
Default
false
Example
true
-
Configures a separate access and error log in the /var/log/nginx directory for each virtualHost.
Type
boolean
Default
true
Example
-
Whether to enable HTTPS and reject plain HTTP connections. This will set
defaults for listen to listen on all interfaces on port 443.
Type
boolean
Default
false
Example
-
Configuration lines to be appended inside of the http {} block.
Type
strings concatenated with "\n"
Default
""
Example
-
If set, all requests for this host are redirected (defaults to 301,
configurable with redirectCode) to the given hostname.
Type
null or string
Default
null
Example
"newserver.example.org"
-
These lines go to the end of the location verbatim.
Type
strings concatenated with "\n"
Default
""
Example
-
A host of an existing Let's Encrypt certificate to use.
This is useful if you have many subdomains and want to avoid hitting the
rate limit.
Alternately, you can generate a certificate through {option}enableACME.
Note that this option does not create any certificates, nor it does add subdomains to existing ones – you will need to create them manually using .
Type
null or string
Default
null
Example
-
Disable the suggested mitigations against the D(HE)at Attack
Type
boolean
Default
false
Example
-
Order of this location block in relation to the others in the vhost.
The semantics are the same as with lib.mkOrder. Smaller values have
a greater priority.
Type
signed integer
Default
1000
Example
-
Path to server SSL certificate.
Type
path
Default
Example
"/var/host.cert"
-
Basic Auth protection for a vhost.
WARNING: This is implemented to store the password in plain text in the
Nix store.
Type
attribute set of string
Default
{ }
Example
{
user = "password";
};
-
Adds try_files directive.
Type
null or string
Default
null
Example
"$uri =404"
-
Alias directory for requests.
Type
null or path
Default
null
Example
"/your/alias/directory"