set up nginx on bordervm for testing outboard secrets

2024-08-10 23:05:50 +01:00 · 2024-08-10 23:05:50 +01:00 · 2480fdef5b
parent 409c1cfb16
commit 2480fdef5b
2 changed files with 10 additions and 0 deletions
--- a/bordervm-configuration.nix
+++ b/bordervm-configuration.nix
@ -89,6 +89,16 @@ in {
      };
    };

+    services.nginx = {
+      enable = true;
+      user = "liminix";
+      virtualHosts.${config.networking.hostName} = {
+        root = "/home/liminix";
+        default = true;
+      };
+    };
+    systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
+
    systemd.services.sshd.wantedBy = pkgs.lib.mkForce [ "multi-user.target" ];

    virtualisation = {
--- a/pkgs/http-fstree/example.json
+++ b/pkgs/http-fstree/example.json