harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

feat(rustdesk): enable SSL and update proxy configuration

Browse source 
Enabled `forceSSL` for the RustDesk nginx configuration to ensure secure connections. Replaced `proxyPass` with detailed `extraConfig` to include necessary headers and support for WebSocket connections.
This commit is contained in:
Harald Hoyer 2025-02-24 10:19:46 +01:00
parent 64f48c5969
commit f2a984c762
1 changed files with 21 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
systems/x86_64-linux/mx/rustdesk.nix
View file

@ -11,15 +11,31 @@
services.nginx.virtualHosts."rustdesk.hoyer.world" = { services.nginx.virtualHosts."rustdesk.hoyer.world" = {
enableACME = false; enableACME = false;
useACMEHost = "hoyer.world"; useACMEHost = "hoyer.world";
forceSSL = false; forceSSL = true;
locations = { locations = {
"/ws/id" = { "/ws/id" = {
proxyPass = "http://127.0.0.1:21118"; extraConfig = ''
proxyWebsockets = true; proxy_pass http://localhost:21118;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
'';
}; };
"/ws/relay" = { "/ws/relay" = {
proxyPass = "http://127.0.0.1:21119"; extraConfig = ''
proxyWebsockets = true; proxy_pass http://localhost:21119;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
'';
}; };
}; };
}; };