hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

hainich/nginx: disable interest cohort globally

Browse source
This commit is contained in:
schweby 2021-04-15 10:05:56 +02:00
parent 0c55ccb47b
commit 25568db129
No known key found for this signature in database
GPG key ID: B880491D046E2F87
1 changed files with 25 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

45
hosts/hainich/services/nginx.nix
View file

@ -25,27 +25,32 @@
}; };
networking.firewall.allowedTCPPorts = [ 1935 ]; networking.firewall.allowedTCPPorts = [ 1935 ];
services.nginx.appendConfig = '' services.nginx = {
rtmp { appendHttpConfig = ''
server { add_header Permissions-Policy "interest-cohort=()";
listen 1935; '';
application cutiestream { appendConfig = ''
live on; rtmp {
allow publish all; server {
allow play all; listen 1935;
application cutiestream {
live on;
allow publish all;
allow play all;
}
application ingest {
live on;
record all;
record_path /data/ingest;
record_unique on;
# include /var/secrets/ingest.conf;
}
}
} }
application ingest { '';
live on; };
record all;
record_path /data/ingest;
record_unique on;
# include /var/secrets/ingest.conf;
}
}
}
'';
systemd.services.nginx.serviceConfig.ReadWriteDirectories = "/data/ingest /var/secrets"; systemd.services.nginx.serviceConfig.ReadWriteDirectories = "/data/ingest /var/secrets";
} }