From 3664286506f673737c0784b9cfd494cda1dc4618 Mon Sep 17 00:00:00 2001
From: Brian Picciano <mediocregopher@gmail.com>
Date: Thu, 19 May 2022 22:44:33 -0600
Subject: Actually use the auth middleware for assets routes

---
 config.nix | 25 +++++++++++++++----------
 1 file changed, 15 insertions(+), 10 deletions(-)

(limited to 'config.nix')

diff --git a/config.nix b/config.nix
index 95b2b0e..1e3726c 100644
--- a/config.nix
+++ b/config.nix
@@ -1,14 +1,19 @@
 {
-    runDir = "/tmp/mediocre-blog/run";
-    dataDir = "/tmp/mediocre-blog/data";
+  runDir = "/tmp/mediocre-blog/run";
+  dataDir = "/tmp/mediocre-blog/data";
 
-    powSecret = "ssshhh";
-    mlSMTPAddr = "";
-    mlSMTPAuth = "";
-    mlPublicURL = "http://localhost:4000";
-    listenProto = "tcp";
-    listenAddr = ":4000";
+  powSecret = "ssshhh";
+  mlSMTPAddr = "";
+  mlSMTPAuth = "";
+  mlPublicURL = "http://localhost:4000";
+  listenProto = "tcp";
+  listenAddr = ":4000";
 
-    # If empty then a derived static directory is used
-    staticProxyURL = "http://127.0.0.1:4002";
+  # If empty then a derived static directory is used
+  staticProxyURL = "http://127.0.0.1:4002";
+
+  # password is "bar". This should definitely be changed for prod.
+  apiAuthUsers = {
+    "foo" = "$2a$13$0JdWlUfHc.3XimEMpEu1cuu6RodhUvzD9l7iiAqa4YkM3mcFV5Pxi";
+  };
 }
-- 
cgit v1.2.3