feat: wip

nixos/server/git.nix

@@ -423,6 +423,15 @@ See:
         # serve from notes instead of main website
         middlewares = [ "redirect-notes-index" "replace-notes" ];
       };
+      pagesEisfunkeNotesPrivate = {
+        rule = "Host(`www.eisfunke.com`) && (Path(`/notes/private`) || PathPrefix(`/notes/private/`))";
+        priority = 3001;  # must be higher priority than the main pagesEisfunkeNotes router
+        entrypoints = [ "websecure" ];
+        tls.certResolver = "tls";
+        service = "pagesCustom";
+        # serve from notes instead of main website
+        middlewares = [ "auth-dashboard" "replace-notes" ];
+      };
       # blackhole the original GitLab pages notes domain to ensure only the actual domain is used
       pagesEisfunkeNotesBlackhole = {
         rule = "Host(`notes-8efb78.pages.eisfunke.com`)";

nixos/server/proxy.nix

@@ -36,6 +36,7 @@
       };
 
       log.level = "INFO";
+      accessLog.filters.statusCodes = [ "400-599" ];
       metrics.prometheus = {
         entryPoint = "metrics";
         addEntryPointsLabels = true;