2 files changed, 10 insertions, 8 deletions
diff --git a/config/services/web/default.nix b/config/services/web/default.nix
index 1c29ff2..87fb0e8 100644
--- a/config/services/web/default.nix
+++ b/config/services/web/default.nix
@@ -1,7 +1,7 @@
 { ... }:
 
 {
-  imports = [ ./money ./quentin ./rss ./searx ];
+  imports = [ ./money ./quentin ./rss ./searx ./webkeydirectory ];
 
   security.acme = {
     acceptTerms = true;
diff --git a/config/services/web/webkeydirectory/default.nix b/config/services/web/webkeydirectory/default.nix
index 0c222f6..3037dd7 100644
--- a/config/services/web/webkeydirectory/default.nix
+++ b/config/services/web/webkeydirectory/default.nix
@@ -4,14 +4,16 @@ let webkeydirectoryPath = "/.well-known/openpgpkey/${config.networking.domain}";
 in {
   services.nginx.virtualHosts.webkeydirectory = {
     serverName = "openpgpkey.${config.networking.domain}";
-    locations."${webkeydirectoryPath}/hu/" = {
-      root = ./hu;
-      extraConfig = ''
-        default_type        "application/octet-stream";
-        add_header          Access-Control-Allow-Origin * always;
-      '';
+    locations = {
+      "${webkeydirectoryPath}/hu/" = {
+        alias = ./hu/;
+        extraConfig = ''
+          default_type        "application/octet-stream";
+          add_header          Access-Control-Allow-Origin * always;
+        '';
+      };
+      "=${webkeydirectoryPath}/policy".alias = builtins.toFile "policy" "";
     };
-    locations."${webkeydirectoryPath}/policy".root = toFile policy "";
     forceSSL = true;
     enableACME = true;
   };