Fix dilion.immae.dev website

diff --git a/modules/private/system.nix b/modules/private/system.nix
index b2c01b500aacb45f0cc325a32ac0061bbb5d100a..d0943abef708036d34531ccdae9e0e8b4a8bad72 100644 (file)
--- a/modules/private/system.nix
+++ b/modules/private/system.nix
@@ -43,6 +43,7 @@
         home = "/home/${x.name}";
         createHome = true;
         linger = true;
+        # Enable in latest unstable homeMode = "755";
       } // x)) (config.hostEnv.users pkgs))
       // {
         root.packages = let

diff --git a/modules/private/system/dilion.nix b/modules/private/system/dilion.nix
index c5f3b011f677d5c4fba669d2ec81fcc59ec0db8e..569c088d8d0822be8123d18296a5ca0d065e84ec 100644 (file)
--- a/modules/private/system/dilion.nix
+++ b/modules/private/system/dilion.nix
@@ -191,6 +191,7 @@
       "bookstack.cc.immae.dev"
     ];
   };
+  systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
   services.nginx = {
     enable = true;
     recommendedOptimisation = true;
@@ -204,7 +205,7 @@
         acmeRoot = config.myServices.certificates.webroot;
         useACMEHost = name;
         forceSSL = true;
-        root = "/home/immae/www";
+        locations."/".root = "/home/immae/www";
       };
       "caldance.cs.immae.dev" = {
         acmeRoot = config.myServices.certificates.webroot;