From 5db880134deb57cf49f408d98fddb463fea4abe3 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 28 Jun 2022 23:17:51 +0200
Subject: [PATCH] Fix dilion.immae.dev website

---
 modules/private/system.nix        | 1 +
 modules/private/system/dilion.nix | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/private/system.nix b/modules/private/system.nix
index b2c01b5..d0943ab 100644
--- a/modules/private/system.nix
+++ b/modules/private/system.nix
@@ -43,6 +43,7 @@
         home = "/home/${x.name}";
         createHome = true;
         linger = true;
+        # Enable in latest unstable homeMode = "755";
       } // x)) (config.hostEnv.users pkgs))
       // {
         root.packages = let
diff --git a/modules/private/system/dilion.nix b/modules/private/system/dilion.nix
index c5f3b01..569c088 100644
--- a/modules/private/system/dilion.nix
+++ b/modules/private/system/dilion.nix
@@ -191,6 +191,7 @@
       "bookstack.cc.immae.dev"
     ];
   };
+  systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
   services.nginx = {
     enable = true;
     recommendedOptimisation = true;
@@ -204,7 +205,7 @@
         acmeRoot = config.myServices.certificates.webroot;
         useACMEHost = name;
         forceSSL = true;
-        root = "/home/immae/www";
+        locations."/".root = "/home/immae/www";
       };
       "caldance.cs.immae.dev" = {
         acmeRoot = config.myServices.certificates.webroot;
-- 
2.41.0