diff --git a/modules/services/nas/nginx.nix b/modules/services/nas/nginx.nix index eb45c13..e06a8fd 100644 --- a/modules/services/nas/nginx.nix +++ b/modules/services/nas/nginx.nix @@ -32,8 +32,13 @@ useACMEHost = "home.opel-online.de"; forceSSL = true; locations."/" = { - proxyPass = "https://cache.ci.kabtop.de"; extraConfig = '' + proxy_pass https://cache.ci.kabtop.de; + proxy_ssl_server_name on; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_set_header Host cache.ci.kabtop.de; + proxy_cache nix_cache; proxy_cache_valid 200 14d; proxy_cache_valid 404 1m; @@ -70,6 +75,8 @@ }; }; + systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/mnt/Pluto/nix-cache" ]; + networking.firewall = { enable = true; allowedUDPPorts = [ ];