From 84900c2ccec76fac6f7d8e0cec08dcccb7965314 Mon Sep 17 00:00:00 2001
From: Alexander Kassouni <alex@kassouni.net>
Date: Sun, 27 Sep 2026 18:54:09 -0700
Subject: flakes, web configs

---
 configuration.nix | 3 +++
 web.nix           | 8 ++++++++
 2 files changed, 11 insertions(+)
 create mode 100644 web.nix

diff --git a/configuration.nix b/configuration.nix
index 2a19efc..96c5e48 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -5,6 +5,7 @@
     ./options.nix
     ./git.nix
     ./ssh.nix
+    ./web.nix
   ];
   
   boot.loader = {
@@ -15,6 +16,8 @@
     efi.canTouchEfiVariables = true;
   };
 
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
   networking.hostName = "chariot";
   networking.networkmanager.enable = true;
 
diff --git a/web.nix b/web.nix
new file mode 100644
index 0000000..b34f8d8
--- /dev/null
+++ b/web.nix
@@ -0,0 +1,8 @@
+{...}: {
+  # dont serve git.kassouni.net traffic to other subdomains
+  services.nginx.virtualHosts."_" = {
+    default = true;
+    rejectSSL = true;
+    locations."/".return = 444;
+  };
+}
-- 
cgit v1.3.1