harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

chore(nix): enhance Nginx proxy settings for Headscale

Browse source 
- Added extra HTTP headers and security configurations in the Nginx proxy for Headscale.
- Improves websocket handling, security headers, and HTTPS redirection.
This commit is contained in:
Harald Hoyer 2025-11-24 13:54:52 +01:00
parent 8d6db08029
commit 2d0d03f845
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
systems/x86_64-linux/mx/headscale.nix
View file

@ -28,6 +28,18 @@ in
locations."/" = {
proxyPass = "http://localhost:${toString config.services.headscale.port}";
proxyWebsockets = true;
extraConfig = ''
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header Host $server_name;
proxy_redirect http:// https://;
proxy_buffering off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
'';
};
};
};