pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

website: add security.txt

Browse source 
Ref: pub-solar/legal#11
This commit is contained in:
Benjamin Yule Bädorf 2024-03-22 12:38:29 +01:00
parent ef943f02e3
commit 2bb2247716
Signed by untrusted user: b12f
GPG key ID: 729956E1124F8F26
1 changed files with 17 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
hosts/nachtigall/apps/nginx-website.nix
View file

@ -1,6 +1,4 @@
{ ... }: { lib, ... }: {
{
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d '/srv/www/pub.solar' 0750 hakkonaut hakkonaut - -" "d '/srv/www/pub.solar' 0750 hakkonaut hakkonaut - -"
]; ];
@ -54,6 +52,22 @@
''; '';
}; };
# Responsible disclosure information https://securitytxt.org/
"/.well-known/security.txt" = let
securityTXT = lib.lists.foldr (a: b: a + "\n" + b) "" [
"Contact: mailto:admins@pub.solar"
"Expires: 2025-01-04T23:00:00.000Z"
"Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/8A8987ADE3736C8CA2EB315A9B809EBBDD62BAE3"
"Preferred-Languages: en,de"
"Canonical: https://pub.solar/.well-known/security.txt"
];
in {
extraConfig = ''
add_header Content-Type text/plain;
return 200 '${securityTXT}';
'';
};
"/satzung" = { "/satzung" = {
extraConfig = '' extraConfig = ''
return 302 https://cloud.pub.solar/s/iaKqiW25QJpHPYs; return 302 https://cloud.pub.solar/s/iaKqiW25QJpHPYs;