hosts/alice/gdm.nix

@@ -1,4 +1,4 @@
-{
+_: {
   services.xserver = {
     enable = true;
     displayManager.gdm = {

hosts/alice/gpg.nix

@@ -1,4 +1,4 @@
-{
+_: {
   programs.gnupg.agent = {
     enable = true;
     enableSSHSupport = true;

hosts/alice/pipewire.nix

@@ -1,4 +1,4 @@
-{
+_: {
   security.rtkit.enable = true;
 
   services.pipewire = {

hosts/alice/syncthing.nix

@@ -1,4 +1,4 @@
-{
+_: {
   services.syncthing = {
     enable = true;
     user = "buffet";

hosts/alice/tlp.nix

@@ -1,4 +1,4 @@
-{
+_: {
   services = {
     tlp = {
       enable = true;

hosts/ami/404.nix

@@ -1,5 +1,12 @@
 {website, ...}: {
   services.nginx = {
+    enable = true;
+
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
     virtualHosts."404.buffet.sh" = {
       default = true;
       useACMEHost = "buffet.sh";

hosts/ami/bitwarden.nix

@@ -15,6 +15,13 @@ in {
     };
 
     nginx = {
+      enable = true;
+
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
       virtualHosts."bitwarden.buffet.sh" = {
         useACMEHost = "buffet.sh";
         forceSSL = true;

hosts/ami/default.nix

@@ -15,9 +15,8 @@
     ./borg.nix
     ./disk-config.nix
     ./forgejo.nix
-    ./msmtp.nix
     ./murmur.nix
-    ./nginx.nix
+    ./msmtp.nix
     ./upgrade.nix
     ./website.nix
 

hosts/ami/disk-config.nix

@@ -1,4 +1,4 @@
-{
+_: {
   disko.devices = {
     disk.main = {
       device = "/dev/sda";

hosts/ami/forgejo.nix

@@ -73,6 +73,13 @@ in {
     };
 
     nginx = {
+      enable = true;
+
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
       virtualHosts."buffets.kitchen" = {
         useACMEHost = "buffet.sh";
         forceSSL = true;

hosts/ami/murmur.nix

@@ -1,4 +1,4 @@
-{
+_: {
   services.murmur = {
     enable = true;
     openFirewall = true;

hosts/ami/nginx.nix

@@ -1,10 +0,0 @@
-{
-  services.nginx = {
-    enable = true;
-
-    recommendedGzipSettings = true;
-    recommendedOptimisation = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-  };
-}

hosts/ami/upgrade.nix

@@ -1,4 +1,4 @@
-{
+_: {
   system.autoUpgrade = {
     enable = true;
     flake = "https://buffets.kitchen/kitchen/rice/archive/main.tar.gz#ami";

hosts/ami/website.nix

@@ -2,6 +2,13 @@
   networking.firewall.allowedTCPPorts = [80 443];
 
   services.nginx = {
+    enable = true;
+
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
     virtualHosts."buffet.sh" = {
       useACMEHost = "buffet.sh";
       forceSSL = true;

users/buffet/fzf.nix

@@ -1,4 +1,4 @@
-{
+_: {
   home-manager.users.buffet = {
     programs.fzf = {
       enable = true;

users/buffet/git.nix

@@ -1,4 +1,4 @@
-{
+_: {
   home-manager.users.buffet = {
     programs.git = {
       enable = true;

users/buffet/gpg.nix

@@ -1,4 +1,4 @@
-{
+_: {
   home-manager.users.buffet = {
     programs.gpg.enable = true;
   };