From 76edda78330c0057a9b13af59ebe66ccfdfe33cc Mon Sep 17 00:00:00 2001
From: Emelie Graven <emelie@graven.dev>
Date: Fri, 10 Dec 2021 08:33:12 +0100
Subject: [PATCH] Add tor subdomain

---
 unstable/config/hosts/wind/services/nginx.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/unstable/config/hosts/wind/services/nginx.nix b/unstable/config/hosts/wind/services/nginx.nix
index 5dc1d30..e219049 100644
--- a/unstable/config/hosts/wind/services/nginx.nix
+++ b/unstable/config/hosts/wind/services/nginx.nix
@@ -77,6 +77,21 @@
 				'';
 			};
 		};
+		"tor.graven.dev" = {
+			forceSSL = true;
+			useACMEHost = "graven.dev";
+			locations."/" = {
+				root = "/var/www/tor";
+				extraConfig = ''
+					add_header Access-Control-Allow-Origin "*";
+					add_header Strict-Transport-Security $hsts_header;
+					add_header Referrer-Policy "same-origin";
+					add_header X-Frame-Options "DENY";
+					add_header X-Content-Type-Options "nosniff";
+					add_header X-XSS-Protection "1; mode=block";
+				'';
+			};
+		};
 		"mta-sts.graven.dev" = {
 			forceSSL = true;
 			enableACME = true;