feat: firefly-iii test

modules/nixos/services/firefly/default.nix

@@ -25,20 +25,29 @@ in
       virtualHosts = {
         "${host}" = {
           extraConfig = ''
-            reverse_proxy ${localhost}:8080 {
+            encode gzip
-                header_up X-Forwarded-Proto {scheme}
-                header_up X-Forwarded-Host {host}
-                header_up X-Forwarded-Server {host}
-                header_up X-Forwarded-For {remote_host}
-                header_up Host {host}
 
-                timeout 300s
+            reverse_proxy localhost:8080 {
+                header_up Host {host}:{server_port}
+                header_up X-Real-IP {remote_host}
+                header_up X-Forwarded-For {remote_host}
+                header_up X-Forwarded-Proto https
+                header_up X-Forwarded-Host {host}
+                header_up X-Forwarded-Ssl on
+                header_up Connection ""
+
+                timeout 240s
+                dial_timeout 240s
+            }
+
+            @session_cookie header Cookie *session*
+            handle @session_cookie {
+                header Cache-Control "no-cache, no-store, must-revalidate"
             }
 
             request_body {
                 max_size 64MB
             }
-
             tls ${service.ssl.cert} ${service.ssl.key}
           '';
         };