l 1 prism: enable public_html on port 8088

1 files changed, 17 insertions, 0 deletions

diff --git a/lass/1systems/prism.nix b/lass/1systems/prism.nix
index 47e8a68b..c7c76530 100644
--- a/lass/1systems/prism.nix
+++ b/lass/1systems/prism.nix
@@ -243,6 +243,23 @@ in {
         ];
       };
     }
+    {
+      krebs.nginx = {
+        enable = true;
+        servers.public = {
+          listen = [ "8088" ];
+          server-names = [ "default" ];
+          locations = [
+            (nameValuePair "~ ^/~(.+?)(/.*)?\$" ''
+              alias /home/$1/public_html$2;
+            '')
+          ];
+        };
+      };
+      krebs.iptables.tables.filter.INPUT.rules = [
+       { predicate = "-p tcp --dport 8088"; target = "ACCEPT"; }
+      ];
+    }
   ];
 
   krebs.build.host = config.krebs.hosts.prism;