peter/haccfiles
1
0
Fork 0
forked from hacc/haccfiles
Code Issues Pull requests Projects Releases Wiki Activity

hainich/nginx: disable interest cohort globally

Browse source
This commit is contained in:
schweby 2021-04-15 10:05:56 +02:00
parent 0c55ccb47b
commit 25568db129
No known key found for this signature in database
GPG key ID: B880491D046E2F87
1 changed files with 25 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
hosts/hainich/services/nginx.nix
View file

@ -25,27 +25,32 @@
};
networking.firewall.allowedTCPPorts = [ 1935 ];
services.nginx.appendConfig = ''
rtmp {
server {
listen 1935;
application cutiestream {
live on;
allow publish all;
allow play all;
}
application ingest {
live on;
services.nginx = {
appendHttpConfig = ''
add_header Permissions-Policy "interest-cohort=()";
'';
appendConfig = ''
rtmp {
server {
listen 1935;
application cutiestream {
live on;
allow publish all;
allow play all;
}
application ingest {
live on;
record all;
record_path /data/ingest;
record_unique on;
record all;
record_path /data/ingest;
record_unique on;
# include /var/secrets/ingest.conf;
# include /var/secrets/ingest.conf;
}
}
}
}
}
'';
'';
};
systemd.services.nginx.serviceConfig.ReadWriteDirectories = "/data/ingest /var/secrets";
}