-
Whether to enable FC-customized nginx.
Type
boolean
Default
false
Example
true
Declarations
-
Configuration lines to be appended inside of the http {} block.
Type
strings concatenated with "\n"
Default
""
Declarations
-
Declarative vhost config
Type
attribute set of (submodule)
Default
{ }
Example
{
"hydra.example.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:3000";
};
};
};
Declarations
-
Configures a timeout (seconds) for a graceful shutdown of worker processes.
When the time expires, nginx will try to close all the connections currently
open to facilitate shutdown.
By default, nginx will try to close connections 4 minutes after a reload.
Type
signed integer
Default
240
Declarations
-
Addresses to listen on if a vhost does not specify any.
Type
list of string
Default
"addresses of the `fe` network (IPv4 & IPv6)"
Declarations
-
Disable the suggested mitigations against the D(HE)at Attack
Type
boolean
Default
false
Declarations
-
Configures how often log files are rotated before being removed.
If count is 0, old versions are removed rather than rotated.
Type
signed integer
Default
7
Declarations
-
Configures a separate access and error log in the /var/log/nginx directory for each virtualHost.
Type
boolean
Default
true
Declarations
-
Whether to enable Global rate limiting.
Type
boolean
Default
false
Example
true
Declarations
-
Sets the maximum number of requests per second per client.
Type
positive integer, meaning >0
Default
50
Declarations
-
Sets the maximum number of concurrent requests per client.
Type
positive integer, meaning >0
Default
200
Declarations
-
Sets the maximum number of requests to delay/queue if exceeding the rate limit.
Type
positive integer, meaning >0
Default
500
Declarations
-
IPv6 address to listen on.
If neither <option>listenAddress</option> nor <option>listenAddress6</option> is set,
the service listens on the frontend addresses.
If you need more options, use <option>listen</option>.
If you want to configure any number of IPs use <literal>listenAddresses</literal>.
Type
null or string
Default
null
Declarations
-
Basic Auth protection for a vhost.
WARNING: This is implemented to store the password in plain text in the
Nix store.
Type
attribute set of string
Default
{ }
Example
{
user = "password";
};
Declarations
-
Whether to ask Let's Encrypt to sign a certificate for this vhost.
Alternately, you can use an existing certificate through <option>useACMEHost</option>.
Type
boolean
Default
false
Declarations