diff --git a/modules/nixos/services/firefly/default.nix b/modules/nixos/services/firefly/default.nix index 5b9d102..ffa95ee 100644 --- a/modules/nixos/services/firefly/default.nix +++ b/modules/nixos/services/firefly/default.nix @@ -25,20 +25,29 @@ in virtualHosts = { "${host}" = { extraConfig = '' - reverse_proxy ${localhost}:8080 { - header_up X-Forwarded-Proto {scheme} - header_up X-Forwarded-Host {host} - header_up X-Forwarded-Server {host} - header_up X-Forwarded-For {remote_host} - header_up Host {host} + encode gzip - timeout 300s + reverse_proxy localhost:8080 { + header_up Host {host}:{server_port} + header_up X-Real-IP {remote_host} + header_up X-Forwarded-For {remote_host} + header_up X-Forwarded-Proto https + header_up X-Forwarded-Host {host} + header_up X-Forwarded-Ssl on + header_up Connection "" + + timeout 240s + dial_timeout 240s + } + + @session_cookie header Cookie *session* + handle @session_cookie { + header Cache-Control "no-cache, no-store, must-revalidate" } request_body { max_size 64MB } - tls ${service.ssl.cert} ${service.ssl.key} ''; };