host(koumakan): fix permissions for nginx

Changed files
+9 -2
systems
koumakan
services
+7 -1
systems/koumakan/services/static-sites/backup-public.nix
···
-
{ _utils, lib, config, ... }:
+
{
+
_utils,
+
lib,
+
config,
+
...
+
}:
{
services.nginx.virtualHosts."backups.soopy.moe" = _utils.mkVhost {
locations."/" = {
···
};
};
+
systemd.services.nginx.serviceConfig.ReadOnlyPaths = lib.singleton "/home/backup/public";
users.users.nginx.extraGroups = lib.singleton config.users.users.backup.name;
}
+2 -1
systems/koumakan/services/static-sites/user.nix
···
-
{ _utils, ... }:
+
{ _utils, lib, ... }:
{
services.nginx.virtualHosts."users.soopy.moe" = _utils.mkVhost {
locations."/" = _utils.mkNginxFile {
···
extraConfig = "autoindex on;";
};
};
+
systemd.services.nginx.serviceConfig.ReadOnlyPaths = lib.singleton "/home/cassie/Web";
}