From 59fc4ae24c02a4057982259809c490564648690b Mon Sep 17 00:00:00 2001
From: Alexander Kassouni <alex@kassouni.net>
Date: Thu, 12 Nov 2026 00:52:56 -0800
Subject: cors on policy

---
 pgp/default.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/pgp/default.nix b/pgp/default.nix
index 3fd5961..1eedf4d 100644
--- a/pgp/default.nix
+++ b/pgp/default.nix
@@ -6,6 +6,9 @@ let
   pubkey = pkgs.runCommandLocal "wkd-key-${domain}" { nativeBuildInputs = [ pkgs.gnupg ]; } ''
     gpg --dearmor < ${./pubkey.asc} > $out
   '';
+  cors = ''
+    add_header Access-Control-Allow-Origin "*" always;
+  '';
 in
 {
   services.nginx.virtualHosts.${domain}.locations = {
@@ -13,11 +16,14 @@ in
       alias = "${pubkey}";
       extraConfig = ''
         default_type application/octet-stream;
-        add_header Access-Control-Allow-Origin "*" always;
+        ${cors}
       '';
     };
 
-    "= /.well-known/openpgpkey/policy".alias = "${pkgs.emptyFile}";
+    "= /.well-known/openpgpkey/policy" = {
+      alias = "${pkgs.emptyFile}";
+      extraConfig = cors;
+    };
 
     "= /pubkey.asc".alias = "${./pubkey.asc}";
   };
-- 
cgit v1.3.1