hainich/nginx: disable interest cohort globally

This commit is contained in:
schweby 2021-04-15 10:05:56 +02:00
parent 0c55ccb47b
commit 25568db129
No known key found for this signature in database
GPG key ID: B880491D046E2F87

View file

@ -25,27 +25,32 @@
};
networking.firewall.allowedTCPPorts = [ 1935 ];
services.nginx.appendConfig = ''
rtmp {
server {
listen 1935;
application cutiestream {
live on;
allow publish all;
allow play all;
}
application ingest {
live on;
services.nginx = {
appendHttpConfig = ''
add_header Permissions-Policy "interest-cohort=()";
'';
appendConfig = ''
rtmp {
server {
listen 1935;
application cutiestream {
live on;
allow publish all;
allow play all;
}
application ingest {
live on;
record all;
record_path /data/ingest;
record_unique on;
record all;
record_path /data/ingest;
record_unique on;
# include /var/secrets/ingest.conf;
# include /var/secrets/ingest.conf;
}
}
}
}
}
'';
'';
};
systemd.services.nginx.serviceConfig.ReadWriteDirectories = "/data/ingest /var/secrets";
}