Turn on nginx recommended settings. Bump reconn.

services/blog.nix

@@ -4,11 +4,18 @@ let
     "github:jrpotter/blog/457bfd6c521d5d8eeb41deb7d5d6a925fd55dda9";
 in
 {
-  services.nginx.virtualHosts."blog.jrpotter.com" = {
+  services.nginx = {
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts."blog.jrpotter.com" = {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
         root = blog.packages.${system}.app;
       };
     };
+  };
 }

services/boardwise/default.nix

@@ -9,15 +9,21 @@ let
 in
 {
   services = {
-    nginx.virtualHosts."www.boardwise.gg" = {
+    nginx = {
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts."www.boardwise.gg" = {
         forceSSL = true;
         enableACME = true;
         serverAliases = [ "boardwise.gg" ];
         locations."/" = {
-        recommendedProxySettings = true;
           proxyPass = "http://127.0.0.1:4000";
         };
       };
+    };
     postgresql = {
       package = pkgs.postgresql_15;
       ensureDatabases = [ "boardwise" ];

services/bookshelf.nix

@@ -4,11 +4,18 @@ let
     "github:jrpotter/bookshelf/bf9888c050b7a62f58be0198af19a6de7c40b375";
 in
 {
-  services.nginx.virtualHosts."bookshelf.jrpotter.com" = {
+  services.nginx = {
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts."bookshelf.jrpotter.com" = {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
         root = bookshelf.packages.${system}.app;
       };
     };
+  };
 }

services/forgejo.nix

@@ -41,13 +41,19 @@
         };
       };
     };
-    nginx.virtualHosts."git.jrpotter.com" = {
+    nginx = {
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts."git.jrpotter.com" = {
         forceSSL = true;
         enableACME = true;
         locations."/" = {
-        recommendedProxySettings = true;
           proxyPass = "http://127.0.0.1:3000";
         };
       };
     };
+  };
 }

services/notebook.nix

@@ -4,7 +4,13 @@ let
     "github:jrpotter/notebook/79b715a64c703279f593cad08775b0d73400a19b";
 in
 {
-  services.nginx.virtualHosts."notebook.jrpotter.com" = {
+  services.nginx = {
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts."notebook.jrpotter.com" = {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
@@ -12,4 +18,5 @@ in
         tryFiles = "$uri $uri.html $uri/ =404";
       };
     };
+  };
 }

services/portfolio.nix

@@ -4,7 +4,13 @@ let
     "github:jrpotter/portfolio/eca5e764f26faaa64f6966dbf3970b86eaaf2195";
 in
 {
-  services.nginx.virtualHosts."www.jrpotter.com" = {
+  services.nginx = {
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts."www.jrpotter.com" = {
       forceSSL = true;
       enableACME = true;
       serverAliases = [ "jrpotter.com" ];
@@ -12,4 +18,5 @@ in
         root = portfolio.packages.${system}.app;
       };
     };
+  };
 }

services/reconn/default.nix

@@ -1,18 +1,25 @@
 { system, pkgs, lib, ... }:
 let
   reconn = (
-    builtins.getFlake "git+ssh://forgejo@git.jrpotter.com/r/reconn?rev=74cb0be878441c4eafcfd2b2c2c926fe87ea8a30"
+    builtins.getFlake "git+ssh://forgejo@git.jrpotter.com/r/reconn?rev=0657541aa62f9b7a672c239f92eb3b410a3dd1ce"
   ).packages.${system}.app;
 in
 {
   services = {
-    nginx.virtualHosts."www.hideandseek.live" = {
+    nginx = {
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts."www.hideandseek.live" = {
         forceSSL = true;
         enableACME = true;
         serverAliases = [ "hideandseek.live" ];
         locations."/" = {
-        recommendedProxySettings = true;
           proxyPass = "http://127.0.0.1:4000";
+          proxyWebsockets = true;
+        };
       };
     };
     postgresql = {