turn http3 on

hosts/hetzner-vm/hetzner-vm.nix

@@ -28,6 +28,7 @@
   ];
 
   networking.firewall.allowedTCPPorts = [80 443];
+  networking.firewall.allowedUDPPorts = [443];
 
   home-manager.users.root = {
     imports = with tree; [home.base home.dev.small];

profiles/nginx.nix

@@ -1,10 +1,21 @@
-{lib, ...}: {
-  security.acme = {
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  options.services.nginx.virtualHosts = lib.mkOption {
+    type = lib.types.attrsOf (lib.types.submodule {
+      config.http3 = lib.mkDefault true;
+    });
+  };
+
+  config.security.acme = {
     defaults = {email = "chaoticryptidz@owo.monster";};
     acceptTerms = true;
   };
-  services.nginx = {
+  config.services.nginx = {
     enable = true;
+    package = pkgs.nginxQuic;
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
     recommendedProxySettings = true;