From d20c374427214abf7daec792d5d2aa3b5a7fd812 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jonas=20R=C3=B6ger?= <jonas.roeger@tu-dortmund.de>
Date: Wed, 5 Aug 2026 16:30:08 +0200
Subject: [PATCH] System Gen25 @ 2026-08-05-16:30:06 by jonas@harbor

---
 hosts/harbor/configuration.nix |  2 +-
 modules/services/calibre.nix   | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/hosts/harbor/configuration.nix b/hosts/harbor/configuration.nix
index 8bdb1cb..ed7902f 100644
--- a/hosts/harbor/configuration.nix
+++ b/hosts/harbor/configuration.nix
@@ -100,7 +100,7 @@
   hive.matrix.registrationSecretSopsKey = config.sops.secrets.hidden-matrix-registration-secret.name;
   hive.calibre.enable = true;
   hive.calibre.instanceFQDN = "calibre.jroeger.de";
-  hive.calibre.libraries = ["Rote Bücher" "Fiction"];
+  hive.calibre.libraries = ["Rote Bücher" "Technik" "Wissenschaft oder so"];
 
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
diff --git a/modules/services/calibre.nix b/modules/services/calibre.nix
index 48d1727..bec3b7f 100644
--- a/modules/services/calibre.nix
+++ b/modules/services/calibre.nix
@@ -69,12 +69,23 @@
         inherit libraries;
       };
 
+      # Fallback server with only 403
+      services.nginx.virtualHosts.${config.networking.domain} = lib.mkDefault {
+        default = true;
+        locations."/".return = 403;
+        forceSSL = true;
+        enableACME = true;
+      };
+
       # Virtual host for calibre
       services.nginx.virtualHosts."${cfg.instanceFQDN}" = {
         forceSSL = true;
         enableACME = true;
         locations."/" = {
           proxyPass = "http://[::1]:${toString cfg.localPort}";
+          extraConfig = ''
+            client_max_body_size 150M;
+          '';
         };
       };