From 275d11226a61ee868bc5811608da4310c1b62f2a Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Sun, 8 Nov 2020 19:30:56 +0100
Subject: [PATCH] nginx: relax home protection

---
 configuration.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/configuration.nix b/configuration.nix
index 77e2879..5250377 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -376,6 +376,9 @@
       extraConfig = disableLog;
     };
   };
+  # Allow nginx to see home directories for static files
+  # (conditional on having proper group permissions).
+  systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
 
 
   ### Misc. services