diff --git a/configuration.nix b/configuration.nix
index 7641aa7..e45365a 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -65,7 +65,11 @@ in
   # TODO: switch to unixsockets if supported
   services.nginx = {
     enable = true;
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
     recommendedGzipSettings = true;
+    recommendedProxySettings = true;
+    clientMaxBodySize = "500m";
   };
 
   nix = {
diff --git a/photoprism.nix b/photoprism.nix
index e1a719a..dc7061a 100644
--- a/photoprism.nix
+++ b/photoprism.nix
@@ -38,16 +38,10 @@
     }];
   };
 
-
   services.nginx.virtualHosts."photoprism.cgiga.fr" = {
     enableACME = true;
     forceSSL = true;
     serverAliases = [];
-    recommendedTlsSettings = true;
-    recommendedOptimisation = true;
-    recommendedGzipSettings = true;
-    recommendedProxySettings = true;
-    clientMaxBodySize = "500m";
     locations."/" = {
       proxyPass = "http://localhost:2342/";
       proxyWebsockets = true;