Working networking on kernighan, with nginx

system/kernighan/kernighan.nix

@@ -11,6 +11,10 @@
 
   networking = {
     hostName = "kernighan";
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 80 443 ];
+    };
     interfaces = {
        end0.ipv4.addresses = [{
          address = "192.168.40.25";
@@ -22,7 +26,8 @@
        }];
     };
     defaultGateway = "192.168.40.1";
-    defaultGateway6 = "00:b8:c2:db:b8:57";
+    defaultGateway6.address = "fe80::00:b8:c2:db:b8:57";
+    defaultGateway6.interface = "end0";
     nameservers = [ "208.67.222.222" "208.67.220.220" ];
   };
 

system/kernighan/services/nginx.nix

@@ -3,17 +3,23 @@
 {
   services.nginx = {
     enable = true;
+
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
     virtualHosts."test.tsvallender.co.uk" = {
-      #forceSSL = true;
-      #enableACME = true;
+      forceSSL = true;
+      enableACME = true;
       root = "/var/www/tsvallender.co.uk";
     };
   };
- # security.acme = {
- #   acceptTerms = true;
- #   defaults = {
- #     email = "t+acme@tsvallender.co.uk";
- #   }; 
- # };
+  security.acme = {
+    acceptTerms = true;
+    defaults = {
+      email = "t+acme@tsvallender.co.uk";
+    }; 
+  };
 }