0xa/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

proxy authentik and dav with sso

Browse source
This commit is contained in:
Grigory Shipunov 2025-01-21 00:16:31 +00:00
parent 3a98bf89b6
commit 5bbfdddaaa
4 changed files with 70 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

11
hosts/cloud/proxy/default.nix
View file

@ -2,7 +2,7 @@
{
imports = [
./auth.nix
./dav-htaccess.nix
./dav.nix
];
networking.firewall.allowedTCPPorts = [
@ -16,14 +16,15 @@
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedTlsSettings = true;
recommendedProxySettings = true;
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
appendHttpConfig = ''
proxy_buffers 4 256k;
proxy_buffer_size 128k;
proxy_busy_buffers_size 256k;
# upgrade websockets
map $http_upgrade $connection_upgrade_keepalive {
default upgrade;
''' ''';
}
### TLS
# Add HSTS header with preloading to HTTPS requests.