From 8f24ff4e36d50eb5ff82492ea8a70fdb5a2a6ee1 Mon Sep 17 00:00:00 2001
From: Chandler Swift <chandler@chandlerswift.com>
Date: Fri, 4 Jul 2025 16:13:34 -0500
Subject: [PATCH] bert: Serve home.chandlerswift.com/newspapers

---
 bert/services/http/home.chandlerswift.com.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/bert/services/http/home.chandlerswift.com.nix b/bert/services/http/home.chandlerswift.com.nix
index c4886e1..8d280ec 100644
--- a/bert/services/http/home.chandlerswift.com.nix
+++ b/bert/services/http/home.chandlerswift.com.nix
@@ -11,9 +11,20 @@
       body <<EOF
     User-agent: *
     Disallow: /sheets/
+    Disallow: /newspapers/
     EOF
     }
 
+    file_server /newspapers/* {
+      browse ${./caddy-browse-template.html}
+
+      # TOOD: is there a better way to strip the prefix here? This shouldn't be
+      # vulnerable to a directory traversal attack (and it doesn't really
+      # matter anyway; everything in there is public somewhere or another!) but
+      # it sorta feels wrong to do this without a `/sheets` suffix.
+      root /mnt/bigbird_public
+    }
+
     file_server /sheets/* {
       browse ${./caddy-browse-template.html}