cors on policy

1 files changed, 8 insertions, 2 deletions

diff --git a/pgp/default.nix b/pgp/default.nix
index 3fd5961..1eedf4d 100644
--- a/pgp/default.nix
+++ b/pgp/default.nix
@@ -6,6 +6,9 @@ let
   pubkey = pkgs.runCommandLocal "wkd-key-${domain}" { nativeBuildInputs = [ pkgs.gnupg ]; } ''
     gpg --dearmor < ${./pubkey.asc} > $out
   '';
+  cors = ''
+    add_header Access-Control-Allow-Origin "*" always;
+  '';
 in
 {
   services.nginx.virtualHosts.${domain}.locations = {
@@ -13,11 +16,14 @@ in
       alias = "${pubkey}";
       extraConfig = ''
         default_type application/octet-stream;
-        add_header Access-Control-Allow-Origin "*" always;
+        ${cors}
       '';
     };
 
-    "= /.well-known/openpgpkey/policy".alias = "${pkgs.emptyFile}";
+    "= /.well-known/openpgpkey/policy" = {
+      alias = "${pkgs.emptyFile}";
+      extraConfig = cors;
+    };
 
     "= /pubkey.asc".alias = "${./pubkey.asc}";
   };