Explore Flying Circus NixOS Options

Ciphers to choose from when negotiating TLS handshakes.

Whether to enable FC-customized nginx.

Whether to enable Global rate limiting.

Sets the maximum number of requests to delay/queue if exceeding the rate limit.

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

A host of an existing Let's Encrypt certificate to use. This is useful if you have many subdomains and want to avoid hitting the rate limit. Alternately, you can generate a certificate through {option}enableACME. Note that this option does not create any certificates, nor it does add subdomains to existing ones – you will need to create them manually using .

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests. This requires using pkgs.nginxQuic package which can be achieved by setting services.nginx.package = pkgs.nginxQuic; and activate the QUIC transport protocol services.nginx.virtualHosts.<name>.quic = true;. Note that special application protocol support is experimental and not yet recommended for production. Read more at https://quic.nginx.org/

Name of this virtual host. Defaults to attribute name in virtualHosts.

Basic Auth protection for a vhost.

WARNING: This is implemented to store the password in plain text in the Nix store.

Listen addresses for this virtual host. Compared to listen this only sets the addresses and the ports are chosen automatically.

Note: This option overrides enableIPv6

FastCGI parameters to override. Unlike in the Nginx configuration file, overriding only some default parameters won't unset the default values for other parameters.

Path to server SSL certificate.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Whether to ask Let's Encrypt to sign a certificate for this vhost. Alternately, you can use an existing certificate through {option}useACMEHost.

Configures a timeout (seconds) for a graceful shutdown of worker processes. When the time expires, nginx will try to close all the connections currently open to facilitate shutdown. By default, nginx will try to close connections 4 minutes after a reload.