Nginx: Difference between revisions

← Older edit Newer edit →

@@ Line 155: / Line 155: @@
    ...
    virtualHosts."example.com".extraConfig = ''
-            auth_pam  "Password Required";
+    auth_pam  "Password Required";
-            auth_pam_service_name "nginx";
+    auth_pam_service_name "nginx";
-'';
+  '';
 };
 </syntaxhighlight>
-However, if the password of the user is stored in /etc/shadow, nginx by default will not be able to check the password. Nginx needs to run as root. Running as root will not be needed if issue {{issue|93580}} gets solved. For now, the workaround is:
-<syntaxhighlight lang="nix">
-services.nginx = {
-  user = "root"; # allow access to /etc/shadow
-  appendConfig = let cfg = config.services.nginx; in ''user ${cfg.user} ${cfg.group};'';
-  ...
-};
-</syntaxhighlight>
 ==== TLS reverse proxy ====