Merge remote-tracking branch 'lass/master' into HEAD

1 files changed, 36 insertions, 1 deletions

diff --git a/lass/1systems/yellow/config.nix b/lass/1systems/yellow/config.nix
index ee14986ac..ff7b23687 100644
--- a/lass/1systems/yellow/config.nix
+++ b/lass/1systems/yellow/config.nix
@@ -32,16 +32,51 @@ with import <stockholm/lib>;
     };
   };
 
+  services.nginx = {
+    enable = true;
+    package = pkgs.nginx.override {
+      modules = with pkgs.nginxModules; [
+        fancyindex
+      ];
+    };
+    virtualHosts."dl" = {
+      default = true;
+      locations."/Nginx-Fancyindex-Theme-dark" = {
+        extraConfig = ''
+          alias ${pkgs.fetchFromGitHub {
+            owner = "Naereen";
+            repo = "Nginx-Fancyindex-Theme";
+            rev = "e84f7d6a32085c2b6238f85f5fdebe9ceb710fc4";
+            sha256 = "0wzl4ws2w8f0749vxfd1c8c21p3jw463wishgfcmaljbh4dwplg6";
+          }}/Nginx-Fancyindex-Theme-dark;
+          autoindex on;
+        '';
+      };
+      locations."/" = {
+        root = "/var/download/finished";
+        extraConfig = ''
+          fancyindex on;
+          fancyindex_header "/Nginx-Fancyindex-Theme-dark/header.html";
+          fancyindex_footer "/Nginx-Fancyindex-Theme-dark/footer.html";
+          dav_methods PUT DELETE MKCOL COPY MOVE;
+
+          create_full_put_path on;
+          dav_access all:r;
+        '';
+      };
+    };
+  };
+
   krebs.iptables = {
     enable = true;
     tables.filter.INPUT.rules = [
+      { predicate = "-p tcp --dport 80"; target = "ACCEPT"; }
       { predicate = "-p tcp --dport 9091"; target = "ACCEPT"; }
       { predicate = "-p tcp --dport 51413"; target = "ACCEPT"; }
       { predicate = "-p udp --dport 51413"; target = "ACCEPT"; }
     ];
   };
 
-  services.nginx.enable = true;
   services.openvpn.servers.nordvpn.config = ''
     client
     dev tun