From 9213916cf570885f40b0e464e6b1c282d9b08cb4 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 17 Jun 2026 15:36:24 +0200
Subject: ...

---
 hosts/surtr/email/default.nix | 28 +++++++++++++++++++++-------
 1 file changed, 21 insertions(+), 7 deletions(-)

(limited to 'hosts/surtr/email/default.nix')

diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index d9e6fff9..4fa0d440 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -904,14 +904,28 @@ in {
             ssl_verify_client optional;
             ssl_client_certificate ${toString ./ca/ca.crt};
           '';
-          locations."/" = {
-            proxyPass = "http://password-server";
+          locations = {
+            "@backend" = {
+              proxyPass = "http://password-server";
 
-            extraConfig = ''
-              proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
-              proxy_set_header SSL-CLIENT-S-DN $ssl_client_s_dn;
-            '';}
-          ;
+              extraConfig = ''
+                proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
+                proxy_set_header SSL-CLIENT-S-DN $ssl_client_s_dn;
+              '';
+            };
+            "/" = {
+              root = pkgs.symlinkJoin {
+                name = "root";
+                paths = [
+                  (pkgs.writeTextDir "robots.txt" ''
+                     User-agent: *
+                     Disallow: /
+                   '')
+                ];
+              };
+              tryFiles = "$uri @backend";
+            };
+          };
         };
       };
     };
-- 
cgit v1.2.3