chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2026-01-12 04:19:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

enable proxyProtocol as default

Browse Source
This commit is contained in:
陈浩南
2023-11-11 00:57:49 +08:00
parent b1e2497054
commit 05cd6dd1c8
5 changed files with 6 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
flake.nix
View File

@@ -283,7 +283,7 @@
"anchor.fm" = { upstream = "anchor.fm:443"; proxyProtocol = false; };
"podcasters.spotify.com" = { upstream = "podcasters.spotify.com:443"; proxyProtocol = false; };
"xlog.chn.moe" = { upstream = "cname.xlog.app:443"; proxyProtocol = false; };
"nix-store.chn.moe" = { upstream = "internal.pc.chn.moe"; proxyProtocol = false; };
"nix-store.chn.moe".upstream.address = "internal.pc.chn.moe";
"xn--qbtm095lrg0bfka60z.chn.moe".upstream.address = "internal.pc.chn.moe";
"xn--s8w913fdga.chn.moe".upstream.address = "internal.vps7.chn.moe";
"misskey.chn.moe".upstream.address = "internal.vps7.chn.moe";

10
modules/services/misskey.nix
View File

@@ -167,15 +167,7 @@ inputs:
(instance: with instance.value;
{
name = hostname;
value =
{
listen.main.proxyProtocol = true;
location."/".proxy =
{
upstream = "http://127.0.0.1:${toString port}";
websocket = true;
};
};
value.location."/".proxy = { upstream = "http://127.0.0.1:${toString port}"; websocket = true; };
})
(attrsToList misskey.instances));
};

2
modules/services/nginx/default.nix
View File

@@ -73,7 +73,7 @@ inputs:
type = types.attrsOf (types.submodule { options =
{
http2 = mkOption { type = types.bool; default = true; };
proxyProtocol = mkOption { type = types.bool; default = false; };
proxyProtocol = mkOption { type = types.bool; default = true; };
# if proxyProtocol not enabled, add to transparentProxy only
# if proxyProtocol enabled, add to transparentProxy and streamProxy
addToTransparentProxy = mkOption { type = types.bool; default = true; };

6
modules/services/send.nix
View File

@@ -47,11 +47,7 @@ inputs:
nginx =
{
enable = true;
https."${send.hostname}" =
{
listen.main.proxyProtocol = true;
location."/".proxy = { upstream = "http://127.0.0.1:1443"; websocket = true; };
};
https."${send.hostname}".location."/".proxy = { upstream = "http://127.0.0.1:1443"; websocket = true; };
};
redis.instances.send = { user = "root"; port = 9184; };
};

11
modules/services/synapse.nix
View File

@@ -102,15 +102,8 @@ inputs:
nginx =
{
enable = true;
https.${synapse.hostname} =
{
listen.main.proxyProtocol = true;
location."/".proxy =
{
upstream = "http://127.0.0.1:${toString synapse.port}";
websocket = true;
};
};
https.${synapse.hostname}.location."/".proxy =
{ upstream = "http://127.0.0.1:${toString synapse.port}"; websocket = true; };
};
};
systemd.services.matrix-synapse.enable = synapse.autoStart;