0xa/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

proxy radicale directly for the time being

Browse source
This commit is contained in:
Grigory Shipunov 2025-01-20 17:19:29 +00:00
parent ea75d168e4
commit 3a98bf89b6
3 changed files with 71 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

49
hosts/cloud/proxy/dav.nix Normal file
View file

@ -0,0 +1,49 @@
{ ... }:
{
services.nginx.upstreams.radicale = {
servers = {
"10.89.88.12:5232" = { };
"[fd31:185d:722f::12]:5232" = { };
};
};
services.nginx.virtualHosts."dav.oxapentane.com" = {
forceSSL = true;
enableACME = true;
locations."/oauth2/" = {
proxyPass = "http://10.89.88.11:4180/";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
'';
};
locations."/oauth2/auth" = {
proxyPass = "http://10.89.88.11:4180";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header Content-Length "";
proxy_pass_request_body off;
'';
};
locations."/" = {
proxyPass = "http://radicale/";
extraConfig = ''
auth_request /oauth2/auth;
error_page 401 =403 /oauth2/sign_in;
auth_request_set $user $upstream_http_x_auth_request_user;
auth_request_set $auth_cookie $upstream_http_set_cookie;
# add_header Set-Cookie $auth_cookie;
proxy_set_header X-Remote-User $user;
proxy_set_header X-User $user;
proxy_set_header X-Real-IP $remote_addr;
'';
};
};
}