hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

hainich/nginx: disable interest cohort globally

Browse source
This commit is contained in:
schweby 2021-04-15 10:05:56 +02:00
parent 0c55ccb47b
commit 25568db129
No known key found for this signature in database
GPG key ID: B880491D046E2F87
1 changed files with 25 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
hosts/hainich/services/nginx.nix
View file

@ -25,7 +25,11 @@
}; };
networking.firewall.allowedTCPPorts = [ 1935 ]; networking.firewall.allowedTCPPorts = [ 1935 ];
services.nginx.appendConfig = '' services.nginx = {
appendHttpConfig = ''
add_header Permissions-Policy "interest-cohort=()";
'';
appendConfig = ''
rtmp { rtmp {
server { server {
listen 1935; listen 1935;
@ -41,11 +45,12 @@
record_path /data/ingest; record_path /data/ingest;
record_unique on; record_unique on;
# include /var/secrets/ingest.conf; # include /var/secrets/ingest.conf;
} }
} }
} }
''; '';
};
systemd.services.nginx.serviceConfig.ReadWriteDirectories = "/data/ingest /var/secrets"; systemd.services.nginx.serviceConfig.ReadWriteDirectories = "/data/ingest /var/secrets";
} }