Merge pull request 'Disable password auth and allow serving static files at root domain' (#48) from inex-oct-31 into master

Reviewed-on: #48

files.nix

@@ -25,6 +25,7 @@ in
       "f+ /var/domain 0444 selfprivacy-api selfprivacy-api - ${domain}"
       (if cfg.bitwarden.enable then "f /var/lib/bitwarden/.env 0640 vaultwarden vaultwarden - -" else "")
       "d /var/sieve 0770 virtualMail virtualMail - -"
+      "d /var/www/root 0750 nginx nginx - -"
     ];
   system.activationScripts =
     let

variables-module.nix

@@ -187,7 +187,7 @@ in
         description = ''
           Password authentication for SSH
         '';
-        default = true;
+        default = false;
         type = types.nullOr types.bool;
       };
     };

webserver/nginx.nix

@@ -32,6 +32,11 @@ in
           proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict";
           expires 10m;
         '';
+        locations = {
+          "/" = {
+            root = "/var/www/root";
+          };
+        };
       };
       "vpn.${domain}" = {
         sslCertificate = "/var/lib/acme/wildcard-${domain}/fullchain.pem";