-
Ciphers to choose from when negotiating TLS handshakes.
Type
null or string
Default
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"
Declarations
-
Whether to enable FC-customized nginx.
Type
boolean
Default
false
Example
true
Declarations
-
Whether to enable Global rate limiting.
Type
boolean
Default
false
Example
true
Declarations
-
Whether to ask Let's Encrypt to sign a certificate for this vhost.
Alternately, you can use an existing certificate through {option}useACMEHost.
Type
boolean
Default
false
Declarations
-
Name of this virtual host. Defaults to attribute name in virtualHosts.
Type
null or string
Default
null
Example
"example.org"
Declarations
-
Listen address.
-
These lines go to the end of the location verbatim.
Type
strings concatenated with "\n"
Default
""
Declarations
-
Sets the maximum number of requests per second per client.
Type
positive integer, meaning >0
Default
50
Declarations
-
Adds proxy_pass directive and sets recommended proxy headers if
recommendedProxySettings is enabled.
Type
null or string
Default
null
Example
"http://www.example.org/"
Declarations
-
Adds try_files directive.
Type
null or string
Default
null
Example
"$uri =404"
Declarations
-
Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests.
This requires using pkgs.nginxQuic package
which can be achieved by setting services.nginx.package = pkgs.nginxQuic;
and activate the QUIC transport protocol
services.nginx.virtualHosts.<name>.quic = true;.
Note that special application protocol support is experimental and not yet recommended for production.
Read more at https://quic.nginx.org/
Type
boolean
Default
false
Declarations
-
Additional names of virtual hosts served by this virtual host configuration.
Type
list of string
Default
[ ]
Example
[
"www.example.org"
"example.org"
]
Declarations
-
Path to root SSL certificate for stapling and client certificates.
Type
null or absolute path
Default
null
Example
"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
Declarations
-
HTTP status used by globalRedirect and forceSSL. Possible usecases
include temporary (302, 307) redirects, keeping the request method and
body (307, 308), or explicitly resetting the method to GET (303).
See https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections.
Type
integer between 300 and 399 (both inclusive)
Default
301
Example
308
Declarations
-
Whether to support proxying websocket connections with HTTP/1.1.
Type
boolean
Default
false
Example
true
Declarations