diff --git a/machines/durruti/documentation.nix b/machines/durruti/documentation.nix index 70ea288..a800ab5 100644 --- a/machines/durruti/documentation.nix +++ b/machines/durruti/documentation.nix @@ -12,6 +12,10 @@ proxy_buffering off; proxy_cache off; proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; ''; }; }; diff --git a/machines/durruti/host_config.nix b/machines/durruti/host_config.nix index cc4cf43..172ec59 100644 --- a/machines/durruti/host_config.nix +++ b/machines/durruti/host_config.nix @@ -36,7 +36,18 @@ in services.nginx.virtualHosts."docs.malobeo.org" = { forceSSL = true; enableACME= true; - locations."/".proxyPass = "http://10.0.0.10"; + locations."/" = { + proxyPass = "http://10.0.0.10"; + extraConfig = '' + proxy_buffering off; + proxy_cache off; + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + ''; + }; }; services.nginx.virtualHosts."tasklist.malobeo.org" = { diff --git a/machines/fanny/configuration.nix b/machines/fanny/configuration.nix index fbdffc7..c075eff 100644 --- a/machines/fanny/configuration.nix +++ b/machines/fanny/configuration.nix @@ -71,6 +71,10 @@ in proxy_buffering off; proxy_cache off; proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; ''; }; }; diff --git a/machines/vpn/configuration.nix b/machines/vpn/configuration.nix index 4768543..c32c689 100644 --- a/machines/vpn/configuration.nix +++ b/machines/vpn/configuration.nix @@ -37,6 +37,10 @@ with lib; proxy_buffering off; proxy_cache off; proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; ''; };