From f73990a4278b861ffc5a0077f81b15c0b32f4c24 Mon Sep 17 00:00:00 2001
From: fi <fiona@grzb.de>
Date: Tue, 7 Apr 2026 22:20:28 +0200
Subject: [PATCH] WIP

---
 config/hosts/web-public-2/nginx.nix            |  6 +++---
 .../virtualHosts/element.nekover.se.nix        | 18 ++++++------------
 .../web-public-2/virtualHosts/nekover.se.nix   |  2 +-
 3 files changed, 10 insertions(+), 16 deletions(-)

diff --git a/config/hosts/web-public-2/nginx.nix b/config/hosts/web-public-2/nginx.nix
index 01d6fae..3217be8 100644
--- a/config/hosts/web-public-2/nginx.nix
+++ b/config/hosts/web-public-2/nginx.nix
@@ -17,8 +17,8 @@
       stream {
         map $ssl_preread_server_name $address {
           cloud.nekover.se 10.202.41.122:8443;
-          element.nekover.se 127.0.0.1:8443;
-          element-admin.nekover.se 127.0.0.1:8443;
+          element.nekover.se 10.202.41.100:8443;
+          element-admin.nekover.se 10.202.41.100:8443;
           fi.nekover.se 10.202.41.125:8443;
           git.nekover.se 10.202.41.106:8443;
           hydra.nekover.se 10.202.41.121:8443;
@@ -26,7 +26,7 @@
           mas.nekover.se 10.202.41.112:8443;
           matrix.nekover.se 10.202.41.112:8443;
           matrix-rtc.nekover.se 10.202.41.112:8443;
-          nekover.se 127.0.0.1:8443;
+          nekover.se 10.202.41.100:8443;
           mesh.nekover.se 10.202.41.126:8443;
           nix-cache.nekover.se 10.202.41.121:8443;
           searx.nekover.se 10.202.41.105:8443;
diff --git a/config/hosts/web-public-2/virtualHosts/element.nekover.se.nix b/config/hosts/web-public-2/virtualHosts/element.nekover.se.nix
index 23a3212..6e61d6c 100644
--- a/config/hosts/web-public-2/virtualHosts/element.nekover.se.nix
+++ b/config/hosts/web-public-2/virtualHosts/element.nekover.se.nix
@@ -27,18 +27,12 @@ in
         ./element-web-config
       ];
     };
-    listen = [
-      {
-        addr = "0.0.0.0";
-        port = 80;
-      }
-      {
-        addr = "0.0.0.0";
-        port = 8443;
-        ssl = true;
-        proxyProtocol = true;
-      }
-    ];
+    listen = [{
+      addr = "0.0.0.0";
+      port = 8443;
+      ssl = true;
+      extraParameters = ["proxy_protocol"];
+    }];
 
     # Set no-cache for the version, config and index.html
     # so that browsers always check for a new copy of Element Web.
diff --git a/config/hosts/web-public-2/virtualHosts/nekover.se.nix b/config/hosts/web-public-2/virtualHosts/nekover.se.nix
index 233a49c..4629365 100644
--- a/config/hosts/web-public-2/virtualHosts/nekover.se.nix
+++ b/config/hosts/web-public-2/virtualHosts/nekover.se.nix
@@ -4,7 +4,7 @@
     forceSSL = true;
     enableACME = true;
     listen = [{
-      addr = "localhost";
+      addr = "0.0.0.0";
       port = 8443;
       ssl = true;
       extraParameters = ["proxy_protocol"];