palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

try to fix it, but it did not work.

Browse source
This commit is contained in:
Ingolf Wagner 2023-07-12 14:43:53 +02:00
parent a6b2c99a37
commit e9accea1df
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
2 changed files with 20 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
nixos/assets/contact@ingolf-wagner.de.gpg
View file

Binary file not shown.

27
nixos/machines/robi/nginx-wkd.nix
View file

@ -6,18 +6,25 @@ in
# check :
# - https://metacode.biz/openpgp/web-key-directory
# - $> gpg --homedir "$(mktemp -d)" -v --auto-key-locate clear,wkd,nodefault --locate-key contact@ingolf-wagner.de
services.nginx.virtualHosts.${server_name} = {
locations."= /.well-known/openpgpkey/policy" = {
return = "200";
};
# hashes generated by : gpg --with-wkd-hash --fingerprint contact@ingolf-wagner.de
locations."= /.well-known/openpgpkey/hu/dj3498u4hyyarh35rkjfnghbjxug6b19" = {
services.nginx.virtualHosts.${server_name}.locations =
let
wkd =
{
extraConfig = ''
add_header Access-Control-Allow-Origin *;
'';
alias = pkgs.runCommand "contact@ingolf-wagner.de" { } ''
cat ${assets}/contact@ingolf-wagner.de.gpg | ${pkgs.gnupg}/bin/gpg --dearmor > $out
default_type application/octet-stream;
add_header Access-Control-Allow-Origin * always;
'';
#alias = pkgs.runCommand "contact@ingolf-wagner.de" { } ''
# cat ${assets}/contact@ingolf-wagner.de.gpg | ${pkgs.gnupg}/bin/gpg --dearmor > $out
#'';
alias = toString "${assets}/contact@ingolf-wagner.de.gpg";
};
in
{
"= /.well-known/openpgpkey/policy".return = "200";
# hashes generated by : gpg --with-wkd-hash --fingerprint contact@ingolf-wagner.de
"= /.well-known/openpgpkey/hu/dj3498u4hyyarh35rkjfnghbjxug6b19" = wkd;
};
# todo openpgpkey.ingolf-wagner.de noch einrichten
}