From 2fd1abd9870f0bd701134fd9d476db14b2765ca5 Mon Sep 17 00:00:00 2001
From: Kopatz <7265381+Kropatz@users.noreply.github.com>
Date: Sat, 31 May 2025 13:32:31 +0200
Subject: [PATCH] allow access to files without auth

---
 modules/services/nginx.nix     | 13 ++++++++++++-
 pkgs/kop-fileshare/default.nix |  2 +-
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix
index 6860260..faba350 100644
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -54,7 +54,7 @@ in {
             quic = cfg.https;
             http3 = cfg.https;
             locations = {
-              "~* \\.(jpg|png)$".extraConfig = ''
+              "~* ^/assets/.*\\.(jpg|png)$".extraConfig = ''
                 add_header Access-Control-Allow-Origin *;
               '';
               "/stash" = {
@@ -70,6 +70,17 @@ in {
                   proxy_pass http://localhost:7777;
                 '';
               };
+              "/stash/files" = {
+                extraConfig = ''
+                  proxy_redirect          off;
+                  proxy_set_header        Host $host;
+                  proxy_set_header        X-Real-IP $remote_addr;
+                  proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
+                  proxy_set_header        X-Forwarded-Proto $scheme;
+                  proxy_set_header        X-NginX-Proxy true;
+                  proxy_pass http://localhost:7777;
+                '';
+              };
               "/tracker-site" = {
                 tryFiles = "$uri $uri/ /tracker-site/index.html =404";
               };
diff --git a/pkgs/kop-fileshare/default.nix b/pkgs/kop-fileshare/default.nix
index ea73331..490fcf0 100644
--- a/pkgs/kop-fileshare/default.nix
+++ b/pkgs/kop-fileshare/default.nix
@@ -6,7 +6,7 @@ buildGoModule rec {
   src = fetchGit {
     url = "git@github.com:kropatz/kop-fileshare.git";
     ref = "master";
-    rev = "73456c32d3d070d457f95973403ca94bdddea95d";
+    rev = "ac2c4114c65b21f840fa807e44edf54fffe2d4c7";
   };
   vendorHash = "sha256-OQ6rNgOQHrrhE7DT+ulwpWJCDJ4DeJiDzriAu3mfS7I=";