Synchronize /user served by nginx with Syncthing

Add ACLs for nginx that only allow read access. This is more limited
than allowing all users read access to /srv/syncthing, or adding nginx
as a writable user to the syncthing group.

1 files changed, 1 insertions, 14 deletions

diff --git a/hostnix/elmo/configuration.nix b/hostnix/elmo/configuration.nix
index 7b34054..f414cda 100644
--- a/hostnix/elmo/configuration.nix
+++ b/hostnix/elmo/configuration.nix
@@ -15,6 +15,7 @@
     ./syncthing.nix
     ./system.nix
     ./usenet.nix
+    ./web.nix
     ./wireguard.nix
   ];
 
@@ -77,20 +78,6 @@
     package = pkgs.postgresql_15;
   };
 
-  services.nginx = {
-    enable = true;
-    recommendedGzipSettings = true;
-    recommendedOptimisation = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-    virtualHosts."elmo.mou.fo" = {
-      default = true;
-      enableACME = true;
-      forceSSL = true;
-      root = "/var/www";
-    };
-  };
-
   systemd.services.duperemove = {
     serviceConfig = {
       Type = "simple";