From 62d8ea5b03fdadd77809a3c648f29e97b9515bda Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Sat, 10 Jan 2026 20:01:12 +0200
Subject: [PATCH] m.jakstys.lt

---
 data.nix                        |  1 +
 hosts/fwminex/configuration.nix | 15 +++++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/data.nix b/data.nix
index af3786b..d523680 100644
--- a/data.nix
+++ b/data.nix
@@ -183,6 +183,7 @@ rec {
       vno4                             A     ${vno4}
       vno2                             A     ${vno2}
       r1                               A     ${vno1}
+      m                                A     ${vno1}
 
       @                               TXT    google-site-verification=sU99fmO8gEJF-0lbOY-IzkovC6MXsP3Gozqrs8BR5OM
       @                               TXT    hosted-email-verify=rvyd6h64
diff --git a/hosts/fwminex/configuration.nix b/hosts/fwminex/configuration.nix
index 6012fa9..3237a00 100644
--- a/hosts/fwminex/configuration.nix
+++ b/hosts/fwminex/configuration.nix
@@ -349,6 +349,21 @@ in
           }
           encode gzip
         '';
+        "m.jakstys.lt".extraConfig = ''
+          header {
+            Strict-Transport-Security "max-age=15768000"
+            Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'"
+            X-Content-Type-Options "nosniff"
+            X-Frame-Options "DENY"
+            Alt-Svc "h3=\":443\"; ma=86400"
+            /_/* Cache-Control "public, max-age=31536000, immutable"
+          }
+
+          root * /var/www/m.jakstys.lt
+          file_server {
+            precompressed zstd br gzip
+          }
+        '';
         "jakstys.lt".extraConfig = ''
           header {
             Strict-Transport-Security "max-age=15768000"