49 lines
1.2 KiB
Nix
49 lines
1.2 KiB
Nix
# SPDX-FileCopyrightText: 2021-2022 Simon Bruder <simon@sbruder.de>
|
|
#
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
{ config, lib, pkgs, ... }:
|
|
let
|
|
domain = "schulischer-schabernack.de";
|
|
in
|
|
{
|
|
services.nginx = {
|
|
commonHttpConfig = ''
|
|
# privacy-aware log format
|
|
log_format schabernack '$remote_addr_schabernack - - [$time_local] "$request" $status $body_bytes_sent "-" "$http_user_agent"';
|
|
|
|
# anonymise ip address
|
|
map $remote_addr $remote_addr_schabernack {
|
|
~(?P<ip>\d+\.\d+)\. $ip.0.0;
|
|
~(?P<ip>[^:]+:[^:]+): $ip::;
|
|
default 0.0.0.0;
|
|
}
|
|
'';
|
|
|
|
virtualHosts = {
|
|
${domain} = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
|
|
root = "/var/www/schabernack";
|
|
|
|
# only log page views, rss feed access, media file download and embed views
|
|
extraConfig = ''
|
|
location ~ index\.html|rss\.xml|\.(opus|m4a|ogg|mp3|\.podlove.json)$ {
|
|
access_log /var/log/nginx/schabernack.log schabernack;
|
|
}
|
|
'';
|
|
};
|
|
"www.${domain}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
globalRedirect = domain;
|
|
|
|
extraConfig = ''
|
|
access_log off;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|