Turn on nginx recommended settings. Bump reconn.

services/blog.nix

@@ -4,11 +4,18 @@ let
     "github:jrpotter/blog/457bfd6c521d5d8eeb41deb7d5d6a925fd55dda9";
 in
 {
-  services.nginx.virtualHosts."blog.jrpotter.com" = {
+  services.nginx = {
-    forceSSL = true;
+    recommendedGzipSettings = true;
-    enableACME = true;
+    recommendedOptimisation = true;
-    locations."/" = {
+    recommendedProxySettings = true;
-      root = blog.packages.${system}.app;
+    recommendedTlsSettings = true;
+
+    virtualHosts."blog.jrpotter.com" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        root = blog.packages.${system}.app;
+      };
     };
   };
 }

services/boardwise/default.nix

@@ -9,13 +9,19 @@ let
 in
 {
   services = {
-    nginx.virtualHosts."www.boardwise.gg" = {
+    nginx = {
-      forceSSL = true;
+      recommendedGzipSettings = true;
-      enableACME = true;
+      recommendedOptimisation = true;
-      serverAliases = [ "boardwise.gg" ];
+      recommendedProxySettings = true;
-      locations."/" = {
+      recommendedTlsSettings = true;
-        recommendedProxySettings = true;
+
-        proxyPass = "http://127.0.0.1:4000";
+      virtualHosts."www.boardwise.gg" = {
+        forceSSL = true;
+        enableACME = true;
+        serverAliases = [ "boardwise.gg" ];
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:4000";
+        };
       };
     };
     postgresql = {

services/bookshelf.nix

@@ -4,11 +4,18 @@ let
     "github:jrpotter/bookshelf/bf9888c050b7a62f58be0198af19a6de7c40b375";
 in
 {
-  services.nginx.virtualHosts."bookshelf.jrpotter.com" = {
+  services.nginx = {
-    forceSSL = true;
+    recommendedGzipSettings = true;
-    enableACME = true;
+    recommendedOptimisation = true;
-    locations."/" = {
+    recommendedProxySettings = true;
-      root = bookshelf.packages.${system}.app;
+    recommendedTlsSettings = true;
+
+    virtualHosts."bookshelf.jrpotter.com" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        root = bookshelf.packages.${system}.app;
+      };
     };
   };
 }

services/forgejo.nix

@@ -41,12 +41,18 @@
         };
       };
     };
-    nginx.virtualHosts."git.jrpotter.com" = {
+    nginx = {
-      forceSSL = true;
+      recommendedGzipSettings = true;
-      enableACME = true;
+      recommendedOptimisation = true;
-      locations."/" = {
+      recommendedProxySettings = true;
-        recommendedProxySettings = true;
+      recommendedTlsSettings = true;
-        proxyPass = "http://127.0.0.1:3000";
+
+      virtualHosts."git.jrpotter.com" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3000";
+        };
       };
     };
   };

services/notebook.nix

@@ -4,12 +4,19 @@ let
     "github:jrpotter/notebook/79b715a64c703279f593cad08775b0d73400a19b";
 in
 {
-  services.nginx.virtualHosts."notebook.jrpotter.com" = {
+  services.nginx = {
-    forceSSL = true;
+    recommendedGzipSettings = true;
-    enableACME = true;
+    recommendedOptimisation = true;
-    locations."/" = {
+    recommendedProxySettings = true;
-      root = "${notebook.packages.${system}.app}/share";
+    recommendedTlsSettings = true;
-      tryFiles = "$uri $uri.html $uri/ =404";
+
+    virtualHosts."notebook.jrpotter.com" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        root = "${notebook.packages.${system}.app}/share";
+        tryFiles = "$uri $uri.html $uri/ =404";
+      };
     };
   };
 }

services/portfolio.nix

@@ -4,12 +4,19 @@ let
     "github:jrpotter/portfolio/eca5e764f26faaa64f6966dbf3970b86eaaf2195";
 in
 {
-  services.nginx.virtualHosts."www.jrpotter.com" = {
+  services.nginx = {
-    forceSSL = true;
+    recommendedGzipSettings = true;
-    enableACME = true;
+    recommendedOptimisation = true;
-    serverAliases = [ "jrpotter.com" ];
+    recommendedProxySettings = true;
-    locations."/" = {
+    recommendedTlsSettings = true;
-      root = portfolio.packages.${system}.app;
+
+    virtualHosts."www.jrpotter.com" = {
+      forceSSL = true;
+      enableACME = true;
+      serverAliases = [ "jrpotter.com" ];
+      locations."/" = {
+        root = portfolio.packages.${system}.app;
+      };
     };
   };
 }

services/reconn/default.nix

@@ -1,18 +1,25 @@
 { system, pkgs, lib, ... }:
 let
   reconn = (
-    builtins.getFlake "git+ssh://forgejo@git.jrpotter.com/r/reconn?rev=74cb0be878441c4eafcfd2b2c2c926fe87ea8a30"
+    builtins.getFlake "git+ssh://forgejo@git.jrpotter.com/r/reconn?rev=0657541aa62f9b7a672c239f92eb3b410a3dd1ce"
   ).packages.${system}.app;
 in
 {
   services = {
-    nginx.virtualHosts."www.hideandseek.live" = {
+    nginx = {
-      forceSSL = true;
+      recommendedGzipSettings = true;
-      enableACME = true;
+      recommendedOptimisation = true;
-      serverAliases = [ "hideandseek.live" ];
+      recommendedProxySettings = true;
-      locations."/" = {
+      recommendedTlsSettings = true;
-        recommendedProxySettings = true;
+
-        proxyPass = "http://127.0.0.1:4000";
+      virtualHosts."www.hideandseek.live" = {
+        forceSSL = true;
+        enableACME = true;
+        serverAliases = [ "hideandseek.live" ];
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:4000";
+          proxyWebsockets = true;
+        };
       };
     };
     postgresql = {