diff --git a/modules/nixos/guests/firefly-iii/default.nix b/modules/nixos/guests/firefly-iii/default.nix index 6a67859..ed04877 100755 --- a/modules/nixos/guests/firefly-iii/default.nix +++ b/modules/nixos/guests/firefly-iii/default.nix @@ -53,6 +53,7 @@ in MAIL_PASSWORD_FILE = "/etc/firefly-secrets/smtp"; MAIL_ENCRYPTION = "tls"; SITE_OWNER = email.address2; + TRUSTED_PROXIES = "**"; }; }; @@ -239,7 +240,13 @@ in }; services.caddy.virtualHosts."${host}" = { extraConfig = '' - reverse_proxy http://${serviceCfg.interface.ip}:80 + reverse_proxy http://${serviceCfg.interface.ip}:80 { + header_up Host {host} + header_up X-Real-IP {remote} + header_up X-Forwarded-For {remote} + header_up X-Forwarded-Proto {scheme} + header_up X-Forwarded-Host {host} + } tls ${serviceCfg.ssl.cert} ${serviceCfg.ssl.key}