From 44ffba40db9355715267e4f1f4d939d6afb9302c Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Wed, 25 Feb 2026 00:38:12 +0100
Subject: [PATCH] add security.txt

---
 hosts/www/nginx.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/hosts/www/nginx.nix b/hosts/www/nginx.nix
index 40b60fe..10d73d2 100644
--- a/hosts/www/nginx.nix
+++ b/hosts/www/nginx.nix
@@ -27,9 +27,15 @@ in
           alias = "/srv/http/noc/";
         };
         # RFC8805 new location
-        ".well-known/loc/" = {
+        "/.well-known/loc/" = {
           root = "/srv/http/noc/";
         };
+        "/.well-known/security.txt" = {
+          alias = "/srv/http/security.txt";
+          extraConfig = ''
+            default_type text/plain;
+          '';
+        };
         "/twentyyears/" = {
           alias = "/srv/http/twentyyears/";
         };