From 426394ff22b34d87e693b639183acc91d5b7e5eb Mon Sep 17 00:00:00 2001
From: ahtlon <git@ahtlon.de>
Date: Fri, 4 Sep 2026 18:10:53 +0200
Subject: [PATCH] [fanny] fix hydra proxy

---
 machines/albert/hydra.nix        | 2 ++
 machines/fanny/configuration.nix | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/machines/albert/hydra.nix b/machines/albert/hydra.nix
index acc0a55..31725f0 100644
--- a/machines/albert/hydra.nix
+++ b/machines/albert/hydra.nix
@@ -33,6 +33,8 @@
       binary_cache_secret_key_file = /etc/nix/albert/secret
       binary_cache_dir = /var/lib/hydra/cache
       Include ${config.sops.secrets.gitea_token.path}
+      using_frontend_proxy 1
+      base_uri hydra.malobeo.org
     '';
   };
 
diff --git a/machines/fanny/configuration.nix b/machines/fanny/configuration.nix
index 2d13b7c..87b2823 100644
--- a/machines/fanny/configuration.nix
+++ b/machines/fanny/configuration.nix
@@ -304,8 +304,11 @@ in
       enableACME = true;
       locations."/" = {
         proxyPass = "http://${hosts.malobeo.hosts.albert.network.address}:3000";
+        recommendedProxySettings = true;
         extraConfig = ''
           proxy_set_header Host $host;
+          proxy_set_header X-Forwarded-Port 443;
+          proxy_set_header X-Forwarded-Proto https;
         '';
       };
     };