infrastructure/hosts/nyx.lewd.wtf/services/kasmweb.nix

23 lines
777 B
Nix
Raw Normal View History

2023-04-12 12:47:22 +00:00
{
services.nginx.virtualHosts."kasm.lewd.wtf" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "https://192.168.122.104:443";
proxyWebsockets = true; # needed if you need to use WebSocket
extraConfig =
"proxy_ssl_verify off;" +
"proxy_pass_header Authorization;" +
"proxy_set_header Host $host;" +
"proxy_set_header X-Real-IP $remote_addr;" +
"proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;" +
"proxy_set_header X-Forwarded-Proto $scheme;" +
"proxy_read_timeout 1800s;" +
"proxy_send_timeout 1800s;" +
"proxy_connect_timeout 1800s;" +
"proxy_buffering off;"
;
};
};
}