From 4b7e7ae277d55fa95ef33ddc80df003c8bd00171 Mon Sep 17 00:00:00 2001
From: teutat3s <teutates@mailbox.org>
Date: Sun, 29 Oct 2023 03:37:22 +0100
Subject: [PATCH] feat: add more nginx recommended settings

---
 hosts/nachtigall/apps/nginx-mastodon.nix | 1 +
 hosts/nachtigall/apps/nginx.nix          | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/hosts/nachtigall/apps/nginx-mastodon.nix b/hosts/nachtigall/apps/nginx-mastodon.nix
index 4712a59..7be3783 100644
--- a/hosts/nachtigall/apps/nginx-mastodon.nix
+++ b/hosts/nachtigall/apps/nginx-mastodon.nix
@@ -9,6 +9,7 @@ in
       # mastodon only supports https, but you can override this if you offload tls elsewhere.
       forceSSL = lib.mkDefault true;
       enableACME = lib.mkDefault true;
+      recommendedGzipSettings = true;
 
       locations."/system/".alias = "/var/lib/mastodon/public-system/";
 
diff --git a/hosts/nachtigall/apps/nginx.nix b/hosts/nachtigall/apps/nginx.nix
index 2715583..368b5df 100644
--- a/hosts/nachtigall/apps/nginx.nix
+++ b/hosts/nachtigall/apps/nginx.nix
@@ -15,7 +15,9 @@ in {
     proxyCachePath.cache = {
       enable = true;
     };
+    recommendedOptimisation = true;
     recommendedProxySettings = true;
+    recommendedTlsSettings = true;
   };
   # Nginx user needs access to mastodon unix sockets
   users.users.nginx.extraGroups = [ "mastodon" ];