From 5bbfdddaaa586cd6d5b20ea5b6c36d8867fa3d08 Mon Sep 17 00:00:00 2001
From: Grigory Shipunov
Date: Tue, 21 Jan 2025 00:16:31 +0000
Subject: proxy authentik and dav with sso

---
 hosts/cloud/proxy/default.nix | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

(limited to 'hosts/cloud/proxy/default.nix')

diff --git a/hosts/cloud/proxy/default.nix b/hosts/cloud/proxy/default.nix
index 548fbc7..d727f06 100644
--- a/hosts/cloud/proxy/default.nix
+++ b/hosts/cloud/proxy/default.nix
@@ -2,7 +2,7 @@
 {
   imports = [
     ./auth.nix
-    ./dav-htaccess.nix
+    ./dav.nix
   ];
 
   networking.firewall.allowedTCPPorts = [
@@ -16,14 +16,15 @@
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
     recommendedTlsSettings = true;
-    recommendedProxySettings = true;
 
     sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
 
     appendHttpConfig = ''
-      proxy_buffers 4 256k;
-      proxy_buffer_size 128k;
-      proxy_busy_buffers_size 256k;
+      # upgrade websockets
+      map $http_upgrade $connection_upgrade_keepalive {
+        default upgrade;
+        '''      ''';
+      }
 
       ### TLS
       # Add HSTS header with preloading to HTTPS requests.
-- 
cgit v1.3.1