reject HTTP nicely

2026-01-14 08:45:02 +01:00 · 2024-08-05 20:39:59 +02:00 · 2024-08-05 20:39:59 +02:00 · bce3c7ca65
commit bce3c7ca65
parent 67c6a7f9a0
2 changed files with 6 additions and 2 deletions
--- a/newinfra/nix/modules/ingress/Caddyfile
+++ b/newinfra/nix/modules/ingress/Caddyfile
@ -24,8 +24,6 @@
 	}
 }

-# TODO: compression?
-
 www.noratrieb.dev {
 	redir https://noratrieb.dev{uri} permanent
 }
--- a/newinfra/nix/modules/ingress/default.nix
+++ b/newinfra/nix/modules/ingress/default.nix
@ -1,5 +1,6 @@
 { pkgs, config, lib, name, website, slides, blog, ... }: {
  networking.firewall.allowedTCPPorts = [
+    80
    443
  ];

@ -11,6 +12,11 @@
        ''
          {
              email nilstrieb@proton.me
+              auto_https disable_redirects
+          }
+
+          http:// {
+            respond "This is an HTTP-only server, silly you. Go to https:// instead." 400
          }

          ${config.networking.hostName}.infra.noratrieb.dev {