Commit 48e0ff178634

@@ -1,4 +1,5 @@
 {
+  pkgs,
   libx,
   globals,
   ...
@@ -15,6 +16,7 @@
   # TODO make it an option ? (otherwise I'll add it for all)
   users.users.vincent.linger = true;
 
+  systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www/" ];
   services = {
     wireguard = {
       enable = true;
@@ -22,6 +24,41 @@
       endpoint = "${globals.net.vpn.endpoint}";
       endpointPublicKey = "${globals.machines.kerkouane.net.vpn.pubkey}";
     };
+    nginx = {
+      enable = true;
+      statusPage = true;
+      package = pkgs.nginxMainline.override (_old: {
+        modules = with pkgs.nginxModules; [
+          fancyindex
+          dav
+        ];
+      });
+      recommendedGzipSettings = true;
+      recommendedTlsSettings = true;
+      recommendedOptimisation = true;
+      virtualHosts."dav.athena.sbr.pm" = {
+        locations."/" = {
+          root = "/var/www/dav";
+          basicAuthFile = "/var/www/dav.auth";
+          extraConfig = ''
+            						autoindex on;
+                        set $x $uri$request_method;
+                        if ($x ~ [^/]MKCOL$) {
+                            rewrite ^(.*)$ $1/;
+                        }
+                        dav_methods PUT DELETE MKCOL COPY MOVE;
+                        dav_ext_methods PROPFIND OPTIONS;
+                        dav_access user:rw group:rw all:r;
+                        client_body_temp_path /var/cache/nginx;
+                        create_full_put_path on;
+                        # add_header 'Access-Control-Allow-Origin' '$ALLOWED_ORIGIN' always;
+                        # add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, MKCOL, COPY, MOVE, PROPFIND, OPTIONS' always;
+                        # add_header 'Access-Control-Allow-Headers' 'Origin,Accept,X-Requested-With,Content-Type,Access-Control-Request-Method,Access-Control-Request-Headers,Authorization,X-CSRF-Token,Depth' always;
+                        # add_header 'Access-Control-Allow-Credentials' 'true' always;
+          '';
+        };
+      };
+    };
   };
 
   # TODO: could be enable by default for all ?