felix/nixos
1
0
Fork 0
mirror of https://github.com/Stunkymonkey/nixos.git synced 2025-05-24 09:54:40 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

service/nginx: fix portforwarding ipv6

Browse source
This commit is contained in:
Felix Buehler 2024-12-25 11:51:43 +01:00
parent 7914e97101
commit c57e4cca90
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/services/nginx/default.nix
View file

@ -222,6 +222,7 @@ in
recommendedTlsSettings = true; recommendedTlsSettings = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedBrotliSettings = true; recommendedBrotliSettings = true;
recommendedZstdSettings = true;
# Only allow PFS-enabled ciphers with AES256 # Only allow PFS-enabled ciphers with AES256
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL"; sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
@ -274,9 +275,7 @@ in
} }
# Proxy to port # Proxy to port
(lib.optionalAttrs (args.port != null) { (lib.optionalAttrs (args.port != null) {
locations."/".proxyPass = "http://127.0.0.1:${toString args.port}"; locations."/".proxyPass = "http://localhost:${toString args.port}";
# TODO make ipv6 possible
# http://[::1]:${toString args.port};
}) })
# Serve filesystem content # Serve filesystem content
(lib.optionalAttrs (args.root != null) { inherit (args) root; }) (lib.optionalAttrs (args.root != null) { inherit (args) root; })