derped/nixos
1
0
Fork 0
Code Releases Activity

Nginx 19.09 Changes.

Browse source
This commit is contained in:
Kevin Baensch 2019-10-06 18:30:47 +02:00
parent 2798015ec8
commit ce2c259059
4 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
services/nginx.nix
View file

@ -43,7 +43,7 @@ mkIf (elem "nginx" config.machine.services) {
} }
add_header Strict-Transport-Security $hsts_header; add_header Strict-Transport-Security $hsts_header;
add_header 'Referrer-Policy' 'origin-when-cross-origin'; add_header 'Referrer-Policy' 'origin-when-cross-origin';
add_header X-Frame-Options DENY; # add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";
''; '';

2
services/nginx_vHosts/cache.nix
View file

@ -7,7 +7,7 @@ with lib;
extraConfig = '' extraConfig = ''
location / { location / {
proxy_pass http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}; proxy_pass http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port};
proxy_set_header Host $http_host; proxy_set_header Host $host;
proxy_set_header REMOTE_ADDR $remote_addr; proxy_set_header REMOTE_ADDR $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;

2
services/nginx_vHosts/gitea.nix
View file

@ -15,7 +15,7 @@ with lib;
proxy_pass http://${config.services.gitea.httpAddress}:${toString config.services.gitea.httpPort}; proxy_pass http://${config.services.gitea.httpAddress}:${toString config.services.gitea.httpPort};
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-Ssl on; proxy_set_header X-Forwarded-Ssl on;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_max_temp_file_size 0; proxy_max_temp_file_size 0;

2
services/nginx_vHosts/hydra.nix
View file

@ -7,7 +7,7 @@ with lib;
extraConfig = '' extraConfig = ''
location / { location / {
proxy_pass http://${config.services.hydra.listenHost}:${toString config.services.hydra.port}; proxy_pass http://${config.services.hydra.listenHost}:${toString config.services.hydra.port};
proxy_set_header Host $http_host; proxy_set_header Host $host;
proxy_set_header REMOTE_ADDR $remote_addr; proxy_set_header REMOTE_ADDR $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;