refactor: move repeated nginx snippets into one file

hosts/ami/404.nix

@@ -1,12 +1,5 @@
 {website, ...}: {
   services.nginx = {
-    enable = true;
-
-    recommendedGzipSettings = true;
-    recommendedOptimisation = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-
     virtualHosts."404.buffet.sh" = {
       default = true;
       useACMEHost = "buffet.sh";

hosts/ami/bitwarden.nix

@@ -15,13 +15,6 @@ in {
     };
 
     nginx = {
-      enable = true;
-
-      recommendedGzipSettings = true;
-      recommendedOptimisation = true;
-      recommendedProxySettings = true;
-      recommendedTlsSettings = true;
-
       virtualHosts."bitwarden.buffet.sh" = {
         useACMEHost = "buffet.sh";
         forceSSL = true;

hosts/ami/default.nix

@@ -15,8 +15,9 @@
     ./borg.nix
     ./disk-config.nix
     ./forgejo.nix
-    ./murmur.nix
     ./msmtp.nix
+    ./murmur.nix
+    ./nginx.nix
     ./upgrade.nix
     ./website.nix
 

hosts/ami/forgejo.nix

@@ -73,13 +73,6 @@ in {
     };
 
     nginx = {
-      enable = true;
-
-      recommendedGzipSettings = true;
-      recommendedOptimisation = true;
-      recommendedProxySettings = true;
-      recommendedTlsSettings = true;
-
       virtualHosts."buffets.kitchen" = {
         useACMEHost = "buffet.sh";
         forceSSL = true;

hosts/ami/nginx.nix

@@ -0,0 +1,10 @@
+{
+  services.nginx = {
+    enable = true;
+
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+  };
+}

hosts/ami/website.nix

@@ -2,13 +2,6 @@
   networking.firewall.allowedTCPPorts = [80 443];
 
   services.nginx = {
-    enable = true;
-
-    recommendedGzipSettings = true;
-    recommendedOptimisation = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-
     virtualHosts."buffet.sh" = {
       useACMEHost = "buffet.sh";
       forceSSL = true;