nix: avoid sending nixpkgs on non-builder target
[sourcephile-nix.git] / hosts / losurdo / nginx / sourcephile.fr / losurdo.nix
index bcbf3560ae4aa418bf8df4095c39bb1e9e97098c..0379cad2c3d26a7486dd890f6c97c4358874c072 100644 (file)
@@ -50,7 +50,7 @@ services.nginx = {
   virtualHosts."${onion}.onion" = {
     root = root + "/dl";
     extraConfig = ''
-      access_log /var/log/nginx/${domain}/${srv}/access.log json buffer=32k;
+      access_log /var/log/nginx/${domain}/${srv}/access.json json buffer=32k;
       error_log  /var/log/nginx/${domain}/${srv}/error.log warn;
     '';
     locations."/".extraConfig = ''
@@ -70,7 +70,7 @@ services.nginx = {
     useACMEHost = domain;
     root = root;
     extraConfig = ''
-      access_log /var/log/nginx/${domain}/${srv}/access.log json buffer=32k;
+      access_log /var/log/nginx/${domain}/${srv}/access.json json buffer=32k;
       error_log  /var/log/nginx/${domain}/${srv}/error.log warn;
     '';
     locations."/".extraConfig = ''
@@ -101,11 +101,12 @@ services.nginx = {
       open_file_cache off;
       #open_file_cache_valid 1s;
     '';
-    locations."/perso".extraConfig = ''
-      auth_basic "authentication required";
-      auth_basic_user_file ${gnupg.secrets."nginx/perso/htpasswd".path};
-      autoindex on;
-    '';
+    locations."/perso" = {
+      basicAuthFile = gnupg.secrets."nginx/perso/htpasswd".path;
+      extraConfig = ''
+        autoindex on;
+      '';
+    };
   };
 };
 systemd.services.nginx = {