home

commit dc9ec6838cfebf707560f77fd37b1c7a26f65911
parent 54a489f28dd4bb4280c6b8ac003c7b3e2c3d4b46
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Mon,  5 Oct 2020 12:12:33 +0200

systems: fix nginx ReadWritePaths…

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
M
systems/kerkouane.nix
 | 
1
+
M
systems/modules/services/nix-binary-cache.nix
 | 
3
++-

2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/systems/kerkouane.nix b/systems/kerkouane.nix
@@ -109,6 +109,7 @@ in
             repo: https://git.sr.ht/~vdemeester/sec
       '';
     };
+    systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/vincent/desktop/sites" ];
     nginx = {
       enable = true;
       package = nginx;
diff --git a/systems/modules/services/nix-binary-cache.nix b/systems/modules/services/nix-binary-cache.nix
@@ -21,6 +21,7 @@ in
   };
   config = mkIf cfg.enable {
     networking.firewall.allowedTCPPorts = [ 80 443 ];
+    systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/public-nix-cache" ];
     services.nginx = {
       enable = true;
       appendHttpConfig = ''
@@ -32,7 +33,7 @@ in
           302     "public";
           default "no-cache";
         }
-        access_log logs/access.log;
+        access_log /var/public-nix-cache/access.log;
       '';
       virtualHosts."${cfg.domain}" = {
         serverAliases = cfg.aliases;