diff --git a/hosts/nachtigall/apps/nginx.nix b/hosts/nachtigall/apps/nginx.nix index 9849b820..65ad9886 100644 --- a/hosts/nachtigall/apps/nginx.nix +++ b/hosts/nachtigall/apps/nginx.nix @@ -15,7 +15,10 @@ in { proxyCachePath.cache = { enable = true; }; + recommendedGzipSettings = true; + recommendedOptimisation = true; recommendedProxySettings = true; + recommendedTlsSettings = true; }; security.acme = { diff --git a/hosts/nachtigall/apps/owncast.nix b/hosts/nachtigall/apps/owncast.nix new file mode 100644 index 00000000..a79438e5 --- /dev/null +++ b/hosts/nachtigall/apps/owncast.nix @@ -0,0 +1,30 @@ +{ + flake, + config, + lib, + pkgs, + ... +}: { + services.nginx.virtualHosts."stream.pub.solar" = { + enableACME = true; + forceSSL = true; + locations."/".proxyPass = "http://127.0.0.1:5000"; + }; + + # Owncast + services.owncast = { + enable = true; + user = "owncast"; + group = "owncast"; + # The directory where owncast stores its data files. + dataDir = "/var/lib/owncast"; + # Open the appropriate ports in the firewall for owncast. + openFirewall = true; + # The IP address to bind the owncast web server to. + listen = "127.0.0.1"; + # TCP port where owncast rtmp service listens. + rtmp-port = 1935; + # TCP port where owncast web-gui listens. + port = 5000; + }; +}