SelfPrivacy/selfprivacy-nixos-config
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git synced 2024-11-14 04:13:21 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request 'Disable password auth and allow serving static files at root domain' (#48) from inex-oct-31 into master

Browse source 
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/48
This commit is contained in:
Inex Code 2023-10-31 18:28:19 +02:00
parent 23155b3c96 1464d7f3bd
commit f8befb0e3d
3 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
files.nix
View file

@ -25,6 +25,7 @@ in
"f+ /var/domain 0444 selfprivacy-api selfprivacy-api - ${domain}"
(if cfg.bitwarden.enable then "f /var/lib/bitwarden/.env 0640 vaultwarden vaultwarden - -" else "")
"d /var/sieve 0770 virtualMail virtualMail - -"
"d /var/www/root 0750 nginx nginx - -"
];
system.activationScripts =
let

2
variables-module.nix
View file

@ -187,7 +187,7 @@ in
description = ''
Password authentication for SSH
'';
default = true;
default = false;
type = types.nullOr types.bool;
};
};

5
webserver/nginx.nix
View file

@ -32,6 +32,11 @@ in
proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict";
expires 10m;
'';
locations = {
"/" = {
root = "/var/www/root";
};
};
};
"vpn.${domain}" = {
sslCertificate = "/var/lib/acme/wildcard-${domain}/fullchain.pem";