From 9be9f1b9ffe5b305f3c1ac5f50a6c57e3b36c36d Mon Sep 17 00:00:00 2001
From: Cilly Leang <mini@cilly.moe>
Date: Wed, 18 Mar 2026 00:12:21 +1100
Subject: [PATCH] containers/emerald: only allow urls under /share

---
 containers/emerald/flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/containers/emerald/flake.nix b/containers/emerald/flake.nix
index 315194d..e80fa19 100644
--- a/containers/emerald/flake.nix
+++ b/containers/emerald/flake.nix
@@ -30,7 +30,7 @@
       services.nginx.virtualHosts."${shareFqdn}" = {
         useACMEHost = "lava.moe";
         forceSSL = true;
-        locations."/".proxyPass = "http://[${client}]:4533";
+        locations."/share".proxyPass = "http://[${client}]:4533";
       };
 
       systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];