···

       
2
       
 
       
  name = "nginx-pubhtml";

     

       
3
       
 
       


     

       
4
       
 
       
  machine = { pkgs, ... }: {

     

       
0
       
 
       

     

       
5
       
 
       
    services.nginx.enable = true;

     

       
6
       
 
       
    services.nginx.virtualHosts.localhost = {

     

       
7
       
 
       
      locations."~ ^/\\~([a-z0-9_]+)(/.*)?$".alias = "/home/$1/public_html$2";

     

···

       
2
       
 
       
  name = "nginx-pubhtml";

     

       
3
       
 
       


     

       
4
       
 
       
  machine = { pkgs, ... }: {

     

       
5
       
+
       
    systemd.services.nginx.serviceConfig.ProtectHome = "read-only";

     

       
6
       
 
       
    services.nginx.enable = true;

     

       
7
       
 
       
    services.nginx.virtualHosts.localhost = {

     

       
8
       
 
       
      locations."~ ^/\\~([a-z0-9_]+)(/.*)?$".alias = "/home/$1/public_html$2";