diff options
| author | Grigory Shipunov | 2025-01-21 00:16:31 +0000 |
|---|---|---|
| committer | Grigory Shipunov | 2025-01-21 00:16:37 +0000 |
| commit | 5bbfdddaaa586cd6d5b20ea5b6c36d8867fa3d08 (patch) | |
| tree | fac9de30e0038a098a1ba80e10e979302ade13a0 /hosts/cloud/proxy/default.nix | |
| parent | 3a98bf89b6cc3ddd285501258c2c74c9377c3e19 (diff) | |
proxy authentik and dav with sso
Diffstat (limited to 'hosts/cloud/proxy/default.nix')
| -rw-r--r-- | hosts/cloud/proxy/default.nix | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/hosts/cloud/proxy/default.nix b/hosts/cloud/proxy/default.nix index 548fbc7..d727f06 100644 --- a/hosts/cloud/proxy/default.nix +++ b/hosts/cloud/proxy/default.nix @@ -2,7 +2,7 @@ { imports = [ ./auth.nix - ./dav-htaccess.nix + ./dav.nix ]; networking.firewall.allowedTCPPorts = [ @@ -16,14 +16,15 @@ recommendedGzipSettings = true; recommendedOptimisation = true; recommendedTlsSettings = true; - recommendedProxySettings = true; sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL"; appendHttpConfig = '' - proxy_buffers 4 256k; - proxy_buffer_size 128k; - proxy_busy_buffers_size 256k; + # upgrade websockets + map $http_upgrade $connection_upgrade_keepalive { + default upgrade; + ''' '''; + } ### TLS # Add HSTS header with preloading to HTTPS requests. |