From 9a4f31f52b4a70a4d8e13294e8ad392f9a2eaf25 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Wed, 13 Mar 2024 21:39:10 +0100
Subject: [PATCH] matemat: fix satisfy any

---
 hosts/matemat/default.nix |  3 +++
 lib/nginx.nix             | 19 ++++++++++---------
 2 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/hosts/matemat/default.nix b/hosts/matemat/default.nix
index 07433a42..c23a954f 100644
--- a/hosts/matemat/default.nix
+++ b/hosts/matemat/default.nix
@@ -16,9 +16,12 @@
         default = true;
         forceSSL = true;
         enableACME = true;
+        listen = libC.defaultListen;
         locations."/" = {
           proxyPass = "http://127.0.0.1:3000";
           extraConfig = libC.hqNetworkOnly + ''
+            add_header X-Robots-Tag "noindex" always;
+
             auth_basic secured;
             auth_basic_user_file ${config.sops.secrets."nginx/basic-auth".path};
           '';
diff --git a/lib/nginx.nix b/lib/nginx.nix
index 98704717..73ef6e78 100644
--- a/lib/nginx.nix
+++ b/lib/nginx.nix
@@ -3,15 +3,16 @@ _:
 {
   defaultListen = let
     listen = [
-      {
-        addr = "[::]";
-        port = 80;
-      }
-      {
-        addr = "[::]";
-        port = 443;
-        ssl = true;
-      }
+      # breaks satisfy any
+      # {
+      #   addr = "[::]";
+      #   port = 80;
+      # }
+      # {
+      #   addr = "[::]";
+      #   port = 443;
+      #   ssl = true;
+      # }
       {
         addr = "[::]";
         port = 8080;