fi/nix-infra
1
1
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Set real IP from local proxy

Browse source
This commit is contained in:
fi 2023-09-28 04:57:17 +02:00
parent c1e74a4494
commit e8427dc81d
Signed by: fi
SSH key fingerprint: SHA256:d+6fQoDPMbSFK95zRVflRKZLRKF4cPSQb7VIxYkhFsA
7 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
config/hosts/web-public-2/virtualHosts/anisync.grzb.de.nix
View file

@ -21,6 +21,9 @@
};
extraConfig = ''
add_header X-Content-Type-Options nosniff;
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}

3
config/hosts/web-public-2/virtualHosts/element.nekover.se.nix
View file

@ -78,6 +78,9 @@ in
# redirect server error pages to the static page /50x.html
error_page 500 502 503 504 /50x.html;
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}

3
config/hosts/web-public-2/virtualHosts/gameserver.grzb.de.nix
View file

@ -26,6 +26,9 @@
extraConfig = ''
client_max_body_size 1024m;
add_header X-Content-Type-Options nosniff;
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}

3
config/hosts/web-public-2/virtualHosts/git.grzb.de.nix
View file

@ -28,6 +28,9 @@
client_max_body_size 1024m;
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}

4
config/hosts/web-public-2/virtualHosts/mewtube.nekover.se.nix
View file

@ -18,5 +18,9 @@
locations."/" = {
proxyPass = "http://cloudtube.vs.grzb.de:10412";
};
extraConfig = ''
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}

4
config/hosts/web-public-2/virtualHosts/nekover.se.nix
View file

@ -28,5 +28,9 @@
add_header Access-Control-Allow-Origin *;
'';
};
extraConfig = ''
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}

3
config/hosts/web-public-2/virtualHosts/social.nekover.se.nix
View file

@ -21,6 +21,9 @@
};
extraConfig = ''
client_max_body_size 80m;
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
};
}