cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

homelab tinkering 9

Browse Source
This commit is contained in:
cnst
2025-07-16 13:07:16 +02:00
parent c1d0eb6c1f
commit 9822b71af3
1 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
modules/server/vaultwarden/default.nix
View File

@@ -30,13 +30,18 @@ in {
}; };
services.caddy.virtualHosts."vault.cnst.dev".extraConfig = '' services.caddy.virtualHosts."vault.cnst.dev".extraConfig = ''
reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} log {
header { level INFO
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" output file {$LOG_FILE} {
X-Content-Type-Options "nosniff" roll_size 10MB
X-Frame-Options "SAMEORIGIN" roll_keep 10
Referrer-Policy "strict-origin-when-cross-origin" }
Permissions-Policy "geolocation=(), microphone=(), camera=()" }
encode zstd gzip
reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} {
header_up X-Real-IP {remote_host}
} }
''; '';