diff options
| author | quentin@aristote.fr <quentin@aristote.fr> | 2026-01-28 11:19:57 +0100 |
|---|---|---|
| committer | quentin@aristote.fr <quentin@aristote.fr> | 2026-01-28 11:19:57 +0100 |
| commit | e6200e7c0441487dfeb025954b5fe501f5842085 (patch) | |
| tree | 1bedeeb8be392ad70aca2ebd085a53952b603767 /config/services | |
| parent | 9879d7e790522dfbdfc12931613c4ed43568bd90 (diff) | |
headscale: fix nginx
Diffstat (limited to 'config/services')
| -rw-r--r-- | config/services/mesh/default.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/config/services/mesh/default.nix b/config/services/mesh/default.nix index d8889e8..859972c 100644 --- a/config/services/mesh/default.nix +++ b/config/services/mesh/default.nix @@ -38,10 +38,14 @@ in locations."/" = { proxyPass = "http://${cfg.address}:${toString cfg.port}"; proxyWebsockets = true; + recommendedProxySettings = false; extraConfig = '' proxy_set_header Host $server_name; proxy_redirect http:// https://; proxy_buffering off; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always; ''; }; |
