june/fi-nix-infra
1
0
Fork 0
forked from fi/nix-infra
Code Pull requests Activity

Route IPv6 traffic via valkyrie

Browse source
This commit is contained in:
fi 2026-04-05 18:31:16 +02:00
commit 654a8459eb
Signed by: fi
SSH key fingerprint: SHA256:dgX1HRsK+8F1OzYvKfv1VLhMJac/Iv/rsjixuV94+dA
14 changed files with 58 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

5
config/hosts/web-public-2/virtualHosts/element-admin.nekover.se.nix
View file

@ -37,7 +37,7 @@ in
enableACME = true;
listen = [{
addr = "localhost";
addr = "0.0.0.0";
port = 8443;
ssl = true;
extraParameters = ["proxy_protocol"];
@ -86,7 +86,8 @@ in
# $remote_port to the client address and client port, when using proxy
# protocol.
# First set our proxy protocol proxy as trusted.
set_real_ip_from 127.0.0.1;
set_real_ip_from 10.202.41.100; # IPv4 from web-public-2
set_real_ip_from 10.203.10.3; # IPv6 from valkyrie
# Then tell the realip_module to get the addreses from the proxy protocol
# header.
real_ip_header proxy_protocol;