freifunk/mail2-nixos-config
0
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

fu google

Browse source
This commit is contained in:
Daniel Frank 2021-05-01 18:42:06 +02:00
parent cff35f130e
commit b05d227a04
Signed by: tokudan
GPG key ID: 063CCCAD04182D32
3 changed files with 17 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hopglass-frontend.nix
View file

@ -13,12 +13,14 @@ in
root = "${hopglass-fe}"; root = "${hopglass-fe}";
extraConfig = '' extraConfig = ''
access_log off; access_log off;
add_header Permissions-Policy "interest-cohort=()" always;
''; '';
locations."/" = { locations."/" = {
extraConfig = '' extraConfig = ''
index index.html; index index.html;
etag off; etag off;
add_header etag "\"${builtins.substring 11 32 hopglass-fe}\""; add_header etag "\"${builtins.substring 11 32 hopglass-fe}\"";
add_header Permissions-Policy "interest-cohort=()" always;
''; '';
}; };
}; };

2
postfixadmin.nix
View file

@ -30,10 +30,12 @@ in
etag off; etag off;
add_header etag "\"${builtins.substring 11 32 postfixadminpkg}\""; add_header etag "\"${builtins.substring 11 32 postfixadminpkg}\"";
add_header Permissions-Policy "interest-cohort=()" always;
index index.php; index index.php;
location ~* \.php$ { location ~* \.php$ {
add_header Permissions-Policy "interest-cohort=()" always;
# Zero-day exploit defense. # Zero-day exploit defense.
# http://forum.nginx.org/read.php?2,88845,page=3 # http://forum.nginx.org/read.php?2,88845,page=3
# Won't work properly (404 error) if the file is not stored on this # Won't work properly (404 error) if the file is not stored on this

9
roundcube.nix
View file

@ -34,23 +34,28 @@ in
root = "${roundcube}/public_html"; root = "${roundcube}/public_html";
extraConfig = '' extraConfig = ''
access_log off; access_log off;
add_header Permissions-Policy "interest-cohort=()" always;
''; '';
locations."~ ^/favicon.ico/.*$" = { locations."~ ^/favicon.ico/.*$" = {
extraConfig = "try_files $uri kins/larry/images/$uri;"; extraConfig = ''
try_files $uri kins/larry/images/$uri;
add_header Permissions-Policy "interest-cohort=()" always;
'';
}; };
locations."/" = { locations."/" = {
extraConfig = '' extraConfig = ''
index index.php; index index.php;
try_files $uri /public/$uri /index.php$is_args$args; try_files $uri /public/$uri /index.php$is_args$args;
etag off; etag off;
add_header etag "\"${builtins.substring 11 32 roundcube}\""; add_header etag "\"${builtins.substring 11 32 roundcube}\"";
add_header Permissions-Policy "interest-cohort=()" always;
''; '';
}; };
locations."~ [^/]\.php(/|$)" = { locations."~ [^/]\.php(/|$)" = {
extraConfig = '' extraConfig = ''
etag off; etag off;
add_header etag "\"${builtins.substring 11 32 roundcube}\""; add_header etag "\"${builtins.substring 11 32 roundcube}\"";
add_header Permissions-Policy "interest-cohort=()" always;
fastcgi_split_path_info ^(.+?\.php)(/.*)$; fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) { if (!-f $document_root$fastcgi_script_name) {