liminix

commit 2480fdef5b5e07c5ab02d7350f0025a876889692
parent 409c1cfb16d07630dba0ed6e87176b097dc63ce7
Author: Daniel Barlow <dan@telent.net>
Date:   Sat, 10 Aug 2024 23:05:50 +0100

set up nginx on bordervm for testing outboard secrets

Diffstat:
M
bordervm-configuration.nix
 | 
10
++++++++++
R
pkgs/http-fstree/example.json -> examples/secrets.json
 | 
0

2 files changed, 10 insertions(+), 0 deletions(-)
diff --git a/bordervm-configuration.nix b/bordervm-configuration.nix
@@ -89,6 +89,16 @@ in {
       };
     };
 
+    services.nginx = {
+      enable = true;
+      user = "liminix";
+      virtualHosts.${config.networking.hostName} = {
+        root = "/home/liminix";
+        default = true;
+      };
+    };
+    systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
+
     systemd.services.sshd.wantedBy = pkgs.lib.mkForce [ "multi-user.target" ];
 
     virtualisation = {
diff --git a/pkgs/http-fstree/example.json b/examples/secrets.json