From ce2c259059f8d9d1d15bed241497470d4e1d46e0 Mon Sep 17 00:00:00 2001 From: derped Date: Sun, 6 Oct 2019 18:30:47 +0200 Subject: [PATCH] Nginx 19.09 Changes. --- services/nginx.nix | 2 +- services/nginx_vHosts/cache.nix | 2 +- services/nginx_vHosts/gitea.nix | 2 +- services/nginx_vHosts/hydra.nix | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/nginx.nix b/services/nginx.nix index 41714a0..76c504f 100644 --- a/services/nginx.nix +++ b/services/nginx.nix @@ -43,7 +43,7 @@ mkIf (elem "nginx" config.machine.services) { } add_header Strict-Transport-Security $hsts_header; add_header 'Referrer-Policy' 'origin-when-cross-origin'; - add_header X-Frame-Options DENY; + # add_header X-Frame-Options DENY; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block"; ''; diff --git a/services/nginx_vHosts/cache.nix b/services/nginx_vHosts/cache.nix index 81b26a6..265feba 100644 --- a/services/nginx_vHosts/cache.nix +++ b/services/nginx_vHosts/cache.nix @@ -7,7 +7,7 @@ with lib; extraConfig = '' location / { proxy_pass http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}; - proxy_set_header Host $http_host; + proxy_set_header Host $host; proxy_set_header REMOTE_ADDR $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https; diff --git a/services/nginx_vHosts/gitea.nix b/services/nginx_vHosts/gitea.nix index a2a3cd6..84de3e7 100644 --- a/services/nginx_vHosts/gitea.nix +++ b/services/nginx_vHosts/gitea.nix @@ -15,7 +15,7 @@ with lib; proxy_pass http://${config.services.gitea.httpAddress}:${toString config.services.gitea.httpPort}; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Real-IP $remote_addr; - proxy_set_header Host $http_host; + proxy_set_header Host $host; proxy_set_header X-Forwarded-Ssl on; proxy_set_header X-Forwarded-Proto $scheme; proxy_max_temp_file_size 0; diff --git a/services/nginx_vHosts/hydra.nix b/services/nginx_vHosts/hydra.nix index d09c4ac..374dd67 100644 --- a/services/nginx_vHosts/hydra.nix +++ b/services/nginx_vHosts/hydra.nix @@ -7,7 +7,7 @@ with lib; extraConfig = '' location / { proxy_pass http://${config.services.hydra.listenHost}:${toString config.services.hydra.port}; - proxy_set_header Host $http_host; + proxy_set_header Host $host; proxy_set_header REMOTE_ADDR $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https;