Add add.txt & disable unnecessary logging

etc/nginx/snippets/robots.conf

@@ -4,5 +4,6 @@ add_header X-Robots-Tag "noindex, nofollow" always;
 location = /robots.txt {
     root /srv/nginx;
     allow all;
+    log_not_found off;
     access_log off;
 }

etc/nginx/snippets/universal_paths.conf

@@ -1,3 +1,16 @@
 location /.well-known/acme-challenge/ {
     root /srv/nginx;
+}
+
+location = /ads.txt {
+    root /srv/nginx;
+    allow all;
+    log_not_found off;
+    access_log off;
+}
+location = /app-ads.txt {
+    root /srv/nginx;
+    allow all;
+    log_not_found off;
+    access_log off;
 }

setup.sh

@@ -66,6 +66,8 @@ fi
 # Setup webroot for NGINX
 ## Explicitly using /var/srv here because SELinux does not follow symlinks
 sudo semanage fcontext -a -t httpd_sys_content_t "$(realpath /srv/nginx)(/.*)?"
+unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/srv/nginx/ads.txt | sudo tee /srv/nginx/ads.txt > /dev/null
+unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/srv/nginx/app-ads.txt | sudo tee /srv/nginx/app-ads.txt > /dev/null
 unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/srv/nginx/robots.txt | sudo tee /srv/nginx/robots.txt > /dev/null
 sudo mkdir -p /srv/nginx/.well-known/acme-challenge
 sudo chmod -R 755 /srv/nginx/.well-known/acme-challenge

srv/nginx/ads.txt

@@ -0,0 +1 @@
+placeholder.example.com, placeholder, DIRECT, placeholder

srv/nginx/app-ads.txt

@@ -0,0 +1 @@
+placeholder.example.com, placeholder, DIRECT, placeholder