24.11

2024-12-07 22:46:35 +01:00
parent 850d0b0ec5
commit ebc5b269ef
10 changed files with 15 additions and 145 deletions
--- a/base/services/nginx.nix
+++ b/base/services/nginx.nix
@@ -33,6 +33,10 @@

  systemd.services.nginx.serviceConfig = lib.mkIf config.services.nginx.enable {
    LimitNOFILE = 65536;
+    # We use jit my dudes
+    MemoryDenyWriteExecute = lib.mkForce false;
+    # What the fuck do we use that where the defaults are not enough???
+    SystemCallFilter = lib.mkForce null;
  };

  services.nginx.virtualHosts."_" = lib.mkIf config.services.nginx.enable {
@@ -41,4 +45,4 @@
    addSSL = true;
    extraConfig = "return 444;";
  };
-}
+}