crans
/
nixos
mirror of https://gitlab.crans.org/nounous/nixos
19
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

anubis : séparation cookies

reverseproxy
Pyjacpp 2026-08-14 18:01:11 +02:00
parent 12fe631737
commit f49423d26c
No known key found for this signature in database
GPG Key ID: ED479A5A26930939
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/services/reverseproxy.nix
View File

@ -175,7 +175,10 @@ in
BIND_NETWORK = "unix"; BIND_NETWORK = "unix";
METRICS_BIND = "/run/anubis/anubis-${vhostName}/anubis-${vhostName}-metrics.sock"; METRICS_BIND = "/run/anubis/anubis-${vhostName}/anubis-${vhostName}-metrics.sock";
TARGET = "unix:///run/nginx/nginx-${vhostName}.sock"; TARGET = "unix:///run/nginx/nginx-${vhostName}.sock";
COOKIE_DOMAIN = "crans.${mainTld}"; COOKIE_DOMAIN = "${vhostName}.crans.${mainTld}";
# TODO: db pour mettre en commun les token.
# Transitoirement on les sépare
COOKIE_PREFIX = "anubis-${vhostName}";
REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}"; REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}";
SOCKET_MODE = "0660"; SOCKET_MODE = "0660";
# Secret partagé entre les instances # Secret partagé entre les instances