From 612f664e078162d075822cc71c49322b2ff21695 Mon Sep 17 00:00:00 2001
From: "quentin@aristote.fr" <quentin@aristote.fr>
Date: Thu, 29 Jan 2026 13:51:09 +0100
Subject: headscale: re-add recommended proxy settings

---
 config/services/mesh/default.nix | 5 -----
 1 file changed, 5 deletions(-)

(limited to 'config/services/mesh/default.nix')

diff --git a/config/services/mesh/default.nix b/config/services/mesh/default.nix
index 859972c..0d596cc 100644
--- a/config/services/mesh/default.nix
+++ b/config/services/mesh/default.nix
@@ -38,14 +38,9 @@ in
     locations."/" = {
       proxyPass = "http://${cfg.address}:${toString cfg.port}";
       proxyWebsockets = true;
-      recommendedProxySettings = false;
       extraConfig = ''
-        proxy_set_header Host $server_name;
         proxy_redirect http:// https://;
         proxy_buffering off;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
         add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
       '';
     };
-- 
cgit v1.2.3