From cc7d594807aa6b4190586cfbd1c07760ca28db6f Mon Sep 17 00:00:00 2001 From: Alexander Tomokhov Date: Wed, 14 May 2025 15:05:46 +0400 Subject: [PATCH] nextcloud: disable /updater location (substitute html) --- sp-modules/nextcloud/module.nix | 13 +++++++++++++ sp-modules/nextcloud/updater.html | 9 +++++++++ 2 files changed, 22 insertions(+) create mode 100644 sp-modules/nextcloud/updater.html diff --git a/sp-modules/nextcloud/module.nix b/sp-modules/nextcloud/module.nix index a709830..51f96de 100644 --- a/sp-modules/nextcloud/module.nix +++ b/sp-modules/nextcloud/module.nix @@ -31,6 +31,11 @@ let auth-passthru.mkServiceAccountTokenFP linuxUserOfService; oauthClientSecretFP = auth-passthru.mkOAuth2ClientSecretFP linuxUserOfService; + + updater-page-substitute = + pkgs.runCommandNoCC "nextcloud-updater-page-substitute" { } '' + install -m644 ${./updater.html} -DT $out/index.html + ''; in { options.selfprivacy.modules.nextcloud = with lib; { @@ -232,6 +237,14 @@ in locations."~ \\.php(?:$|/)".extraConfig = '' error_page 500 502 503 504 ${pkgs.nginx}/html/50x.html; ''; + locations."^~ /updater/" = { + alias = updater-page-substitute + "/"; + extraConfig = '' + error_page 410 /index.html; + # otherwise, nginx returns 405 for POST requests to static content + error_page 405 =200 $uri; + ''; + }; }; } # the following part is active only when "auth" module is enabled diff --git a/sp-modules/nextcloud/updater.html b/sp-modules/nextcloud/updater.html new file mode 100644 index 0000000..1670b6b --- /dev/null +++ b/sp-modules/nextcloud/updater.html @@ -0,0 +1,9 @@ + + + +Updater Disabled + +

This page is not available

+

Since NixOS manages updates, this page is disabled.

+ +