Simon Bruder
10b8d432d5
This applies the REUSE specification to the repository, so the licensing information can be tracked for every file individually.
49 lines
1.2 KiB
Nix
49 lines
1.2 KiB
Nix
# SPDX-FileCopyrightText: 2021-2022 Simon Bruder <simon@sbruder.de>
|
|
#
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
{ config, lib, pkgs, ... }:
|
|
let
|
|
domain = "schulischer-schabernack.de";
|
|
in
|
|
{
|
|
services.nginx = {
|
|
commonHttpConfig = ''
|
|
# privacy-aware log format
|
|
log_format schabernack '$remote_addr_schabernack - - [$time_local] "$request" $status $body_bytes_sent "-" "$http_user_agent"';
|
|
|
|
# anonymise ip address
|
|
map $remote_addr $remote_addr_schabernack {
|
|
~(?P<ip>\d+\.\d+)\. $ip.0.0;
|
|
~(?P<ip>[^:]+:[^:]+): $ip::;
|
|
default 0.0.0.0;
|
|
}
|
|
'';
|
|
|
|
virtualHosts = {
|
|
${domain} = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
|
|
root = "/var/www/schabernack";
|
|
|
|
# only log page views, rss feed access, media file download and embed views
|
|
extraConfig = ''
|
|
location ~ index\.html|rss\.xml|\.(opus|m4a|ogg|mp3|\.podlove.json)$ {
|
|
access_log /var/log/nginx/schabernack.log schabernack;
|
|
}
|
|
'';
|
|
};
|
|
"www.${domain}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
globalRedirect = domain;
|
|
|
|
extraConfig = ''
|
|
access_log off;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|