nixos/middleman: Add stuff.nul.ie file browser

nixos/boxes/colony/vms/shill/containers/middleman/default.nix

@@ -54,6 +54,10 @@ in
                   owner = "nginx-sso";
                   group = "nginx-sso";
                 };
+                "middleman/htpasswd" = {
+                  owner = "nginx";
+                  group = "nginx";
+                };
               };
             };
 
@@ -193,6 +197,7 @@ in
               enableReload = true;
               additionalModules = with pkgs.nginxModules; [
                 vts
+                fancyindex
               ];
 
               recommendedTlsSettings = true;

nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix

@@ -368,6 +368,18 @@ in
         };
         useACMEHost = lib.my.pubDomain;
       };
+
+      "stuff.${lib.my.pubDomain}" = {
+        locations."/" = {
+          basicAuthFile = config.age.secrets."middleman/htpasswd".path;
+          root = "/mnt/media/stuff";
+          extraConfig = ''
+            fancyindex on;
+            fancyindex_show_dotfiles on;
+          '';
+        };
+        useACMEHost = lib.my.pubDomain;
+      };
     };
 
     minio =

nixos/boxes/colony/vms/shill/default.nix

@@ -159,7 +159,11 @@ in
               containers.instances =
               let
                 instances = {
-                  middleman = {};
+                  middleman = {
+                    bindMounts = {
+                      "/mnt/media" = {};
+                    };
+                  };
                   vaultwarden = {};
                   colony-psql = {};
                   chatterbox = {};

secrets/middleman/htpasswd.age

@@ -0,0 +1,12 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----