m.jakstys.lt

data.nix

@@ -183,6 +183,7 @@ rec {
       vno4                             A     ${vno4}
       vno2                             A     ${vno2}
       r1                               A     ${vno1}
+      m                                A     ${vno1}
 
       @                               TXT    google-site-verification=sU99fmO8gEJF-0lbOY-IzkovC6MXsP3Gozqrs8BR5OM
       @                               TXT    hosted-email-verify=rvyd6h64

hosts/fwminex/configuration.nix

@@ -349,6 +349,21 @@ in
           }
           encode gzip
         '';
+        "m.jakstys.lt".extraConfig = ''
+          header {
+            Strict-Transport-Security "max-age=15768000"
+            Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'"
+            X-Content-Type-Options "nosniff"
+            X-Frame-Options "DENY"
+            Alt-Svc "h3=\":443\"; ma=86400"
+            /_/* Cache-Control "public, max-age=31536000, immutable"
+          }
+
+          root * /var/www/m.jakstys.lt
+          file_server {
+            precompressed zstd br gzip
+          }
+        '';
         "jakstys.lt".extraConfig = ''
           header {
             Strict-Transport-Security "max-age=15768000"