nginx: small config modifs on losurdo

diff --git a/machines/losurdo/nginx/sourcephile.fr/losurdo.nix b/machines/losurdo/nginx/sourcephile.fr/losurdo.nix
index c0960ee29ebd95311011ec0dc767e69293cc93c8..3d74149f55edbacf5942972214c58a9cf07ce5ae 100644 (file)
--- a/machines/losurdo/nginx/sourcephile.fr/losurdo.nix
+++ b/machines/losurdo/nginx/sourcephile.fr/losurdo.nix
@@ -63,7 +63,13 @@ services.nginx = {
   };
 };
 systemd.services.nginx = {
-  serviceConfig.LogsDirectory = lib.mkForce ["nginx/${domain}/${srv}"];
+  serviceConfig = {
+    LogsDirectory = lib.mkForce ["nginx/${domain}/${srv}"];
+    BindReadOnlyPaths = [
+      "/home/julm/dl:/var/lib/nginx/julm/dl"
+      "/home/julm/haskell:/var/lib/nginx/julm/haskell"
+    ];
+  };
   wants = [ gnupg.secrets."nginx/sevy/htpasswd".service ];
   after = [ gnupg.secrets."nginx/sevy/htpasswd".service ];
 };

diff --git a/nixos/profiles/services/nginx.nix b/nixos/profiles/services/nginx.nix
index d14c9f741b4660afebad590a68e6901458f73736..9cbfedb6b49ae9addfd5587ab78a2ad29923403e 100644 (file)
--- a/nixos/profiles/services/nginx.nix
+++ b/nixos/profiles/services/nginx.nix
@@ -102,6 +102,7 @@ services.nginx = {
     types {
       text/html html5;
       text/plain md;
+      text/plain dump;
     }
     '' +
     lib.concatStringsSep "\n" (lib.attrValues {