fi/nix-infra
1
2
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity

Route IPv6 traffic via valkyrie

Browse source
This commit is contained in:
fi 2026-04-05 18:31:16 +02:00
commit 654a8459eb
Signed by: fi
SSH key fingerprint: SHA256:dgX1HRsK+8F1OzYvKfv1VLhMJac/Iv/rsjixuV94+dA
14 changed files with 58 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

1
config/hosts/web-public-2/nginx.nix
View file

@ -38,7 +38,6 @@
}
server {
listen 0.0.0.0:443;
listen [::]:443;
proxy_pass $address;
ssl_preread on;
proxy_protocol on;

5
config/hosts/web-public-2/virtualHosts/element-admin.nekover.se.nix
View file

@ -37,7 +37,7 @@ in
enableACME = true;
listen = [{
addr = "localhost";
addr = "0.0.0.0";
port = 8443;
ssl = true;
extraParameters = ["proxy_protocol"];
@ -86,7 +86,8 @@ in
# $remote_port to the client address and client port, when using proxy
# protocol.
# First set our proxy protocol proxy as trusted.
set_real_ip_from 127.0.0.1;
set_real_ip_from 10.202.41.100; # IPv4 from web-public-2
set_real_ip_from 10.203.10.3; # IPv6 from valkyrie
# Then tell the realip_module to get the addreses from the proxy protocol
# header.
real_ip_header proxy_protocol;

5
config/hosts/web-public-2/virtualHosts/element.nekover.se.nix
View file

@ -28,7 +28,7 @@ in
];
};
listen = [{
addr = "localhost";
addr = "0.0.0.0";
port = 8443;
ssl = true;
extraParameters = ["proxy_protocol"];
@ -60,7 +60,8 @@ in
# redirect server error pages to the static page /50x.html
error_page 500 502 503 504 /50x.html;
set_real_ip_from 127.0.0.1;
set_real_ip_from 10.202.41.100; # IPv4 from web-public-2
set_real_ip_from 10.203.10.3; # IPv6 from valkyrie
real_ip_header proxy_protocol;
'';
};

3
config/hosts/web-public-2/virtualHosts/nekover.se.nix
View file

@ -23,7 +23,8 @@
'';
};
extraConfig = ''
set_real_ip_from 127.0.0.1;
set_real_ip_from 10.202.41.100; # IPv4 from web-public-2
set_real_ip_from 10.203.10.3; # IPv6 from valkyrie
real_ip_header proxy_protocol;
'';
};