containers/emerald: only allow urls under /share

This commit is contained in:
Cilly Leang 2026-03-18 01:11:20 +11:00
parent ccafbd8ae0
commit 52fbdfe8cf
Signed by: cilly
GPG key ID: 6500251E087653C9

View file

@ -30,7 +30,7 @@
services.nginx.virtualHosts."${shareFqdn}" = {
useACMEHost = "lava.moe";
forceSSL = true;
locations."/".proxyPass = "http://[${client}]:4533";
locations."/share/".proxyPass = "http://[${client}]:4533";
};
systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];