mirror of https://gitlab.crans.org/nounous/nixos
19 lines
468 B
Nix
19 lines
468 B
Nix
{ lib, config, ... }:
|
|
|
|
{
|
|
services.nginx = lib.mkIf config.services.nginx.enable {
|
|
recommendedProxySettings = true;
|
|
recommendedOptimisation = true;
|
|
|
|
clientMaxBodySize = "512M";
|
|
|
|
# On trust nos ip internes pour bien indiquer le client au bout
|
|
# i.e. on considère pas le reverseproxy comme notre client
|
|
appendHttpConfig = ''
|
|
set_real_ip_from 172.16.0.0/16;
|
|
set_real_ip_from fd00::/56;
|
|
real_ip_header X-Real-Ip;
|
|
'';
|
|
};
|
|
}
|